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PREFACE 


The VAX-1ll is a family of upward-compatible computer systems. It is a 
natural outgrowth of and is strongly compatible with the PDP-11 family. 
We believe that these systems represent a significant departure from 
traditional methods of computer deSign. VAX-1l represents’ the 
culmination of years of analysis of the needs of software, and compilers 
in particular. 


For readers interested in just a summary of the family, please refer to 
the VAX Technical Summary. This manual explains the machine language 
programming and operation of any member of the VAX-11l family, for both 
instructional and reference purposes. Basically the manual defines in 
detail how the central processor functions, exactly what its 
instructions do, how it handles data, what its control and status 
information means, and what programming techniques and procedures’ must 
be employed to utilize it effectively. The programming is given in 
machine language, in that it uses only the basic instruction mnemonics 
and symbolic addressing defined by the assembler. The treatment relies 
neither on any other Digital software nor on any of the more 
sophisticated features of the assembler. Moreover, the manual is 
completely self-contained -- no prior knowledge of the assembler is 
required. 


The text of the manual is devoted almost entirely to functional 
description and _ programming. Chapter 1 discusses the goals of the 
system and the notational conventions used throughout the manual. 
Chapter 2 defines the formats of the various forms of data and 
instructions. Chapter 3 discusses the addressing modes’- used in 
instructions. Chapter 4 gives the definition and detailed description 
of all instructions generally available to users of the system. Chapter 
5 defines the memory management aspects of the system. Chapter 9 
discusses the interrupt and exception handling in the system. Chapter 7 
covers process structure and context switching. Chapter 8 defines those 
interactions between processor, memory, and I/O devices which are true 
of any member of the family. Chapter 9 defines the specifics of 
interacting with processor registers. Chapter 18 documents the PDP-1l 
Compatibility Mode of operation. Appendix A is a_summary of the 
instructions, their operands, and the encoding. It is suitable to be 
used to construct an "instruction card". 
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1.1 INTRODUCTION 


VAX-ll represents a significant extension of the PDP-11 family 
architecture. It shares with the PDP-11l byte addressing, similar I/0 
and interrupt structures, and identical data formats. Although the 
instruction set is not strictly compatible with the PDP-1l, it is 
related, and can be mastered easily by a PDP-1ll programmer. Likewise 
the similarity enables straightforward manual conversion of existing 
PDP-ll programs to VAX-1l. Existing user mode PDP-1ll programs which do 
not need the extended features of VAX-11 can run unchanged in the PDP-11l 
compatibility mode provided in VAX-1l. 


As compared to the PDP-1ll, VAX-11 offers a greatly extended virtual 
address space, additional instructions and data types, and new 
addressing modes. Also provided is a sophisticated memory management 
and protection mechanism, and hardware assisted process scheduling and 
synchronization. 


A number of specific goals guided the VAX-11 design: 


1. Maximal compatibility with the PDP-1ll consistent with a 
Significant extension of the virtual address space, and a 
Significant functional enhancement. 


2. High bit efficiency. This is achieved by a wide range of data 
types and new addressing modes. PDP-ll programs naively 
translated to VAX-11 should not grow significantly in size; 
while programs redesigned to exploit VAX-11 should get smaller 
despite the extended virtual address space. 


3. A systematic, elegant instruction set with orthogonality of 
operators, data types, and addressing modes. This enables the 
instruction set to be exploited easily, particularly by high 
level language processors. 
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4. Extensibility. The instruction set is designed so that new 
data types and operators can be included efficiently ina 
manner consistent with the currently defined operators and data 
types. 


5. Range. The architecture should be Suitable over the entire 
range of PDP-1ll computer system implementations currently sold 
by Digital Equipment Corporation. 


The VAX-11l1 Architecture Reference Manual describes the architecture of 
VAX-11 and applies to all implementations of VAX-11l systems. 


1.2 TERMINOLOGY AND CONVENTIONS 
1.2.1 Numbering 


All numbers unless otherwise indicated are decimal. Where there is 
ambiguity, numbers other than decimal are indicated with the base in 
English following the number in parentheses (e.g., FF (hex)). 


1.2.2 UNPREDICTABLE And UNDEFINED 


Results specified as UNPREDICTABLE may vary from moment to moment, 
implementation to implementation, and instruction to instruction within 
implementations. Software can never depend on results specified as 
UNPREDICTABLE. Operations specified as UNDEFINED may vary from moment 
to moment, implementation to implementation, and instruction to 
instruction within implementations. The operation may vary in effect 
from nothing to stopping system operation. UNDEFINED operations must 
not cause the processor to hang i.e. reach an unhalted state from which 
there iS no transition to a normal state in which the machine executes 
instructions. Note the distinction between result and operation. 
Non-privileged software can not invoke UNDEFINED operations. 


1.2.3 Ranges And Extents 


Ranges are specified in English and are inclusive (e.g., a range of 
integers @ through 4 includes the integers @, 1, 2, 3, and 4.) Extents 
are specified by a pair of numbers’ separated by a colon and are 
inclusive (i.e. bits 7:3 specifies an extent of bits including bits 7, 
6, 5, 4, and 3). 
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1.2.4 MBZ 


Fields specified as MBZ (Must Be Zero) should never be filled by 
software with a non-zero value. If the processor encounters a non-zero 
value in a field specified as MBZ, a reserved operand fault or abort 
occurs (see Chapter 6, Exceptions and Interrupts) if that field is 
accessible to non-privileged software. MBZ fields that are accessible 
only to privileged software (kernel mode) may not’ be checked for 
non-zero value by some or all VAX-11 implementations. Non-zero values 


in MBZ fields accessible only to privileged software may produce 
UNDEFINED operation. 


1.2.5 Reserved 


Unassigned values of fields are reserved for future use. In many cases, 
some values are indicated as _ reserved to CSS/customers. Only these 
values should be used for non-standard applications. The values 
indicated as reserved to DEC and all MBZ fields are to be used only to 
extend the standard architecture in the future. 


1.2.6 Figure Drawing Conventions 


Figures which depict registers or memory follow the convention that 
increaSing addresses run right to left and top to bottom. 
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2.1 ADDRESSING 


The basic addressable unit in VAX-11l is the 8-bit byte. Virtual 
addresses are 32 bits long: hence the virtual address space is 2**32 
(approximately 4.3 billion) bytes. Virtual addresses as seen by _ the 
program are translated into physical memory addresses by the memory 
management mechanism described in Chapter 5. 


2.2 DATA TYPES 


2.2.1 Byte 


A byte is 8 contiguous bits starting on an addressable byte boundary. 
The bits are numbered from the right @ through 7: 


A byte is specified by its address A. When interpreted arithmetically, 
a byte is a twos complement integer with bits of increasing significance 
going 8 through 6 and bit 7 the sign bit. The value of the integer is 
in the range -128 through 127. For the purposes of addition, 
subtraction, and comparison, VAX-1l insStructions also provide direct 
support for the interpretation of a byte as an unSigned integer with 
bits of increasing significance going 9 through 7. The value of the 
unSigned integer is in the range 9 through 255. 
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2.2.2 Word 


A word is 2 contiguous bytes starting on an arbitrary byte boundary. 
The bits are numbered from the right 98 through 15: 


A word is specified by its address A, the address of the byte containing 
bit @. When interpreted arithmetically, a word is a twos complement 
integer with bits of increasing significance going 9 through 14 and bit 
15 the sign bit. The value of the integer is in the range -32,768 
through 32,767. For the purposes of addition, subtraction and 
comparison, VAX-1ll instructions also provide direct support for the 
interpretation of a word as an unsigned integer with bits of increasing 
Significance going 9# through 15. The value of the unsigned integer is 
in the range @ through 65,535. 


2.2.3 Longword 


A longword is 4 contiguous bytes starting on an arbitrary byte boundary. 
The bits are numbered from the right 8 through 31: 


A longword is specified by its address A, the address of the byte 
containing bit @. When interpreted arithmetically, a longword is a twos 
complement integer with bits of increasing significance going 9 through 
38 and bit 31 the Sign bit. The value of the integer is in the range 
-2,147,483,648 through 2,147,483,647. For the purposes of addition, 
subtraction, and comparison, VAX-1ll instructions also provide direct 
Support for the interpretation of a longword as an unsigned integer with 
bits of increasing significance going 8 through 31. The value of the 
unsigned integer is in the range @ through 4,294,967,295. 


Note that the longword format is different from the longword format 
defined by the PDP-11l FP-ll. In that format, bits of increasing 
Significance go from 16 through 31 and @ through 14. Bit 15 is the sign 
bit. Most DEC software and in particular PDP-1l1l FORTRAN and COBOL use 
the VAX-11 longword format. 
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2.2.4 Quadword 


A quadword is 8 contiguous bytes starting on an arbitrary byte boundary. 
The bits are numbered from the right @ through 63: 


3 

1] 4) 
Se sah ne ee ee ee seeuee + 
| | 3A 
Posen aise poe ee Sana ase i er eee + 
| | :A+4 
Pee Saal ee ee ee ee eee eae + 

6 3 

3 2 


A quadword is specified by its address A, the address of the byte 
containing bit 9. When interpreted arithmetically, a quadword is a twos 
complement integer with bits of increasing significance going ® through 
62 and bit 63 the sign bit. The value of the integer is in the range 
-2**63 to 2**63-1. The quadword data type is not fully supported by 
VAX-11 instructions. 


2.2.5 Octaword 


A octaword is 16 contiguous bytes starting on an arbitrary byte 
boundary. The bits are numbered from the right @ through 127: 


3 

1 Q 
AG a a sc a a er te i ieee + 
| :A 
Pee eee ee eee eee oe See ee oo eee + 

| | sA+4 
PeSees sete See eee ee eee ee eee eee eee eee eee Selo Sloss + 

| | :A+8 
PaaS ae ae eee ee eee eee ee ae ee ee ee ee tS + 
| | :A+12 
Poe Shea Seo eee eee eee Ce ee ee ae Stee See eee eee ees + 

1 9 

2 6 

5 


A octaword is specified by its address A, the address of the byte 
containing bit @. When interpreted arithmetically, a octaword is a twos 
complement integer with bits of increasing significance going 8 through 
126 and bit 127 the sign bit. The value of the integer is in the range 
—-2**127 to 2**127-1. The octaword data type is not fully supported by 
VAX-11 instructions. 
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2.2.6 F floating 


A F floating datum is 4 contiguous bytes starting on an arbitrary byte 
boundary. The bits are labelled from the right @ through 3l. 


1 il 

5 4 7 9 Qg 
+—+-—------~~~-~---~- +—--—---------- + 

Is | exp | fraction | 3A 
+—-+--—-------------------------- + 

| fraction | sA+2 
f—-—--—---—--------- -------------- + 


A F floating datum is specified by its address A, the address of the 
byte containing bit ®. The form of a F floating datum is sign magnitude 
with bit 15 the sign bit, bits 14:7 an excess 128 binary exponent, and 
bits 6:@ and 31:16 a normalized 24-bit fraction with the redundant most 
Significant fraction bit not represented. Within the fraction, bits of 
increaSing Significance go from 16 through 31 and 9 through 6. The 
8-bit exponent field encodes the values @ through 255. An exponent 
value of @ together with a sign bit of @, is taken to indicate that the 
F floating datum has a value of @. Exponent values of 1 through 255 
indicate true binary exponents of -127 through +127. An exponent value 
of @, together with a sign bit of 1, is taken as_ reserved. Floating 
point instructions processing a reserved operand take a reserved operand 
fault (See Chapter 4 and 6). The value of a F floating datum is in the 
approximate range .29*19**-38 through 1.7*10**38. The precision of a 
F floating datum is approximately one part in 2**23, i.e., typically 7 
decimal digits. 


2.2.7 D floating 


A D floating datum is 8 contiguous bytes starting on an arbitrary byte 
boundary. The bits are labelled from the right @ through 63: 


1 il 

5 4 7 6 4) 
$-$-------~+-~----~- $------------- + 

Is | exp | fraction | :A 
$—+--------------- Poses See eee + 

| fraction | sA+2 
$---------- +--+ +--+ + 
| fraction | sA+4 
$o---- +--+ + 
| fraction | sA+6 
pone + +--+ + + 


A D_ floating datum is specified by its address A, the address of the 
byte containing bit 8. The form of a D floating datum is identical to a 
floating datum except for an additional 32 low significance fraction 
bits. Within the fraction, bits of increasing significance go 48 
through 63, 32 through 47, 16 through 31, and 8 through 6. The exponent 
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conventions, and approximate range of values is the same for D floating 
as F_ floating. The precision of a D floating datum is approximately one 
part in 2**55, i.e., typically 16 decimal digits. 


2.2.8 G floating 


A G floating datum is 8 contiguous bytes starting on an arbitrary byte 
boundary. The bits are labelled from the right @ through 63: 


11 

5 4 4 3 4) 
toposes ee eee eek +------- + 

Is | exp | fract | :A 
Pe Pea ee ee eS pose sase + 

| fraction | sA+2 
poa-- +--+ +--+ + 

| fraction | :A+4 
$---------+-+-------- ~~~ ------ + 

| fraction | :A+6 
ee eee pee ree ee ae + 


A G floating datum is specified by its address A, the address of the 
byte containing bit 6. The form of a G floating datum is sign magnitude 
with bit 15 the sign bit, bits 14:4 an excess 1424 binary exponent, and 
bits 3:0 and 63:16 a normalized 53-bit fraction with the redundant most 
Significant fraction bit not represented. Within the fraction, bits of 
increasing significance go 48 through $3, 32 through 47, 16 through 31, 
and ® through 3. The ll-bit exponent field encodes the values @ through 
2047. An exponent value of @ together with a Sign bit of #, is taken to 
indicate that the G floating datum has a value of 8. Exponent values of 
1 through 2047 indicate true binary exponents of -1823 through +1623. 
An exponent value of @, together with a Sign bit of 1, is taken as 
reserved. Floating point instructions processing a reserved operand 
take a reserved operand fault (See Chapter 4 and 6). The value of a 
G floating datum is in the approximate range .56*108**-398 through 
~9*10**308. The precision of a G floating datum is approximately one 
part in 2**52, i.e., typically 15 decimal digits. 


2.2.9 H floating 


A H_ floating datum is 16 contiguous bytes starting on an arbitrary byte 
boundary. The bits are labelled from the right @ through 127: 
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1 il 

5 4 s) 
$-$----------------------------- + 

Is | exponent | :A 
pof——----------------- ~~ ------ + 

| fraction | sA+2 
De eel ee + 

| fraction | :A+4 
ee eae ee ee ee + 

| fraction | sA+6 
faa ene ees ese ss sess + 

| fraction | :A+8 
$o——---- - +--+ + + 

| fraction | :A+1@ 
$----——- +--+ + + + + + + 

| fraction | :A+12 
poee ese ses ss se se esse e see less + 

| fraction | sA+14 
$-——-—--+--— ++ +--+ + + 


A H_ floating datum is specified by its address A, the address of the 
byte containing bit ®. The form of a H floating datum is sign magnitude 
with bit 15 the sign bit, bits 14:0 an excess 16384 binary exponent, and 
bits 127:16 a normalized 113-bit fraction with the redundant most 
Significant fraction bit not represented. Within the fraction, bits of 
increasing significance go 112 through 127, 96 through 111, 8# through 
95, 64 through 79,48 through 63, 32 through 47, and 16 through 3l. The 
15-bit exponent field encodes the values @ through 32767. An exponent 
value of @ together with a sign bit of @, is taken to indicate that’ the 
H floating datum has a value of 9. Exponent values of 1 through 32767 
indicate true binary exponents of -16383 through +16383. An exponent 
value of 98, together with a Sign bit of 1, is taken as reserved. 
Floating point instructions processing a reserved operand take a 
reserved operand fault (See Chapter 4 and 6). The value of a H floating 
datum is in the approximate range .84*19**-4932 through .59*10**4932. 
The precision of a H_ floating datum is approximately one part in 2**112, 
1.e., typically 33 decimal digits. 


2.2.10 Variable Length Bit Field 


A variable bit field is ® to 32 contiguous bits located arbitrarily with 
respect to byte boundaries. A variable bit field is specified by 3 
attributes: the address A of a byte, a bit position P which is’ the 
Starting location of the field with respect to bit @ of the byte at A, 
and a size S of the field. The specification of a bit field is 
indicated by the following where the field is the shaded area. 
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P+S oe 2 P-l 4) 
foe fe ee ee ee + ee ++ + 
| WZ | :A 
+-------- -------4-------~-------------- $----------- -- - - +--+ ++ + 
ee 4) 


For bit strings in memory, the position is in the range -2**31 through 
2**31-1 and is conveniently viewed as a signed 29-bit byte offset and a 
3-bit bit-within-byte field: 


| byte offset | bwb | 
$e n eS S++ $eanH---- + 


The Sign extended 29-bit byte offset is added to the address A and _ the 
resulting address specifies the byte in which the field begins. The 
3-bit bit-within-byte field encodes the starting position (® through 7) 
of the field within that byte. The VAX-11 field instructions provide 
direct support for the interpretation of a field as a signed or unsigned 
integer. When interpreted as a Signed integer, it is twos complement 
with bits of increasing Significance going @ through S-2; bit S-l is 
the sign bit. When interpreted as an unsigned integer, bits of 
increasing significance go from @ to S-l. A field of size @ has a value 
identically equal to @. 


A variable bit field may be contained in 1 to 5 bytes. From a memory 
management point of view (Chapter 5) only the minimum number of bytes 
necessary to contain the field is actually referenced. 


For bit fields in registers, the position is in the range @ through 31. 
The position operand specifies the starting position (@ through 31) of 
the field in the register. A variable bit field may be contained in 2 
registers if the sum of poSition and size exceeds 32. 


3 

l am P-l 4 
$o------ +4 ------- +--+ + ee ee 5 5 ee + + 5 + +--+ + 
\////IIIIT\ | Rn 
fon ee ee + + 

| IV//////////\ R{ntl] 
fan n -  + + + $—---------- + 
P+S P+S-] 


For further details on the specification of variable length bit fields 
see Chapter 4. 
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2.2.11 Character String 


A character string iS a contiguouS sequence of bytes in memory. A 
character string is specified by 2 attributes: the address A of the 
first byte of the string, and the length L of the string in bytes. Thus 
the format of a character string is: 


7 Q 
Poses sonssousoes + 

| | sA 
po ---------- + 
ee eee + 

| | :A+L—-1 
$ese sos ee Sess + 

7 g 


The address of a string specifies the first character of a string. Thus 
"XYZ" is represented: 


+--------------- + 

| nyu | oA 
+—--------------- + 

| wy | cAt+l 
+--------------- + 

| AL | *A+2 
+--------------- + 


The length L of a string is in the range 9 through 65,535. 


2.2.12 Trailing Numeric String 


A trailing numeric string is a contiguous Sequence of byteS in memory. 
The string is specified by 2 attributes : the address A of the first 


byte (most significant digit) of the string, and the length L of the 
string in bytes. 


All bytes of a trailing numeric string, except the least significant 
digit byte, must contain an ASCII decimal digit character (@-9). The 
representation for the high order digits is: 
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digit decimal hex ASCII character 
Y) 48 30 4) 
1 49 31 1 
2 50 32 2 
3 51 33 3 
4 52 34 4 
5 53 35 5 
6 54 36 6 
; 55 37 7 
8 56 38 8 
9 57 39 9 


The highest addressed byte of a trailing numeric string represents an 
encoding of both the Jeast significant digit and the sign of the numeric 
string. The VAX numeric string instructions support any encoding; 
however there are 3 preferred encodings used by DEC software. These are 
(1) unsigned numeric in which there is no Sign and the least significant 
digit contains an ASCII decimal digit character, (2) zoned numeric, and 
(3) overpunched numeric. Because the overpunch format has been used _ by 
compilers of many manufacturerS over many years, and because various 
card encodings are used, several variations in overpunch format have 
evolved. Typically, these alternate forms are accepted on input; the 
normal form is generated as the output for all operations. The valid 
representations of the digit and sign in each of the later two formats 
is: 
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Representation of Least Significant Digit and Sign 


Zoned Numeric Format Overpunch Format 
digit | decimal hex ASCII | decimal hex ASCII char 
| char | norm alt. 
| | 
9) | 48 30 4) | 123 7B { @[? 
1 | 49 31 1 | 65 4] A 1 
2 | 50 32 2 | 66 42 B 2 
3 | 51 33 3 | 67 43 C 3 
4 | 52 34 4 | 68 44 D 4 
5 | 53 35 5 | 69 45 E 5 
6 | 54 36 6 | 70 46 F 6 
7 | 55 37 7 | 71 47 G 7 
8 | 56 38 8 | 72 48 H 8 
9 | 57 39 9 | 73 49 I 9 
4) | 112 706 p | 125 7D } } ! 
-) | 113 71 q | 74 4A J 
-2 | 114 72 r | 75 4B K 
-3 | 115 73 iS | 76 AC L 
—4 | 116 74 t | 77 AD M 
-5 | 117 75 u | 78 4E N 
-6 | 118 76 V | 79 4E O 
-7 | 119 77 W | 80 56 P 
-8 | 126 78 x | 81 51 Q 
=9 | 121 79 y | 82 52 R 


The length L of a trailing numeric string must be in the range 8 to 31 
(8 to 31 digits). The value of a @ length string is identically @. 


The address A of the string specifies the byte of the string containing 
the most significant digit. Digits of decreasing significance are 
assigned to increasing addresses. Thus "123" is represented: 
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Zoned Format or Unsigned Overpunch Format 

7 4 3 4) 7 4 3 4) 
+------- +------- + +------- +------- + 

| 3 | al | A | 3 | 1 | A 
+—------- $------- + +------- +—------- + 

| 3 | 2 | A+1 | 3 | 2 | A+1 
+------- +------- + +------- +------- + 

| 3 | 3 | A+2 | 4 | 3 | +: A+2 
4+------- +------- + +------- +------- + 


and "-123" is represented : 


Zoned Format Overpunch Format 

7 4 3 4) 7 4 3 y) 
+—------- +------- + +------- +—------- + 

| 3 | 1 | : A | 3 | 1 | : A 
+------- +------- + +------- +-------— + 

| 3 | 2 | oo: Atl | 3 | 2 | A+1 
+—---—---- +------- + 4+------- 4+—------- + 

| 7 | 3 | : A+2 | 4 | C | : A+2 
+------- +------- + +------- +------- + 


2.2.13 Leading Separate Numeric String 


A leading separate numeric string is a contiguous Sequence of bytes in 
memory. A leading separate numeric string is specified by 2 attributes: 
the address A of the first byte (containing the sign character), and a 
length L, which is the length of the string in digits and NOT the length 
of the string in bytes. The number of bytes in a leading separate 
numeric string is L+l. 


The sign of a separate leading numeric string is stored in a _ separate 
byte. Valid sign bytes are: 


Sign decimal hex ASCII character 
+ 43 2B + 
+ 32 20 <blank> 
- 45 2D - 


The preferred representation for "+" is ASCII "+". All subsequent bytes 
contain an ASCII digit character: 
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4) 48 36 4) 

1 49 3) 1 

2 56 32 2 

3 51 33 3 

4 52 34 4 

5 53 35 5 

6 54 36 6 

7 55 37 7 

8 596 38 8 

9 57 39 9 


The length L of a leading separate numeric string must be in 
to 31 (0 to 31 digits). The value of a @ length String is 
QO. 


The address A of the string specifies the byte of the string 
the sign. Digits of decreasing Significance are assigned 
increasing addresses. Thus "+123" is: 


7 4 3 4) 
+----~-- ee + 

| 2 | B | A 

| ------- tomo | 

| 3 | 1 | : Atl 
|------- $------- | 

| 3 | 2 | : A+2 
|------- $o------ | 

| 3 | 3 | : At+3 
$------- $os-—4—5 + 


and "-123" is: 


7 4 3 1) 
+------- +------- + 

| 2 | D | A 
[==S4-== SSS S-= | 

| 3 | 1 [ee ARR 
ee foSeses= | 

| 3 | 2 | : A+2 
|------- haa SaaS | 

| 3 | 3 | : A+3 
$------- $~------ + 


the range @ 
identically 


containing 
to bytes of 


Basic Architecture 29-Feb-89 -- Rev 6 Page 2-13 
DATA TYPES 


2.2.14 Packed Decimal String 


A packed decimal string is a contiguous Sequence of bytes in memory. A 
packed decimal string is specified by 2 attributes: the address A of 
the first byte of the string and a length L which is the number of 
digits in the string and NOT the length of the string in bytes. The 
bytes of a packed decimal string are divided into 2 4-bit fields 
(nibbles) which must contain decimal digits except the low nibble (bits 
3:8) of the last (highest addressed) byte which must contain aé_e sign. 
The representation for the digits and sign is: 


digit or sign decimal hex 
y 4 4 
1 1 1 
2 2 2 
3 3 3 
4 4 4 
5 5 5 
6 6) 6 
7 7 7 
8 8 8 
9 9 9 
+ 18,12,14 or 15 A,C,E, or F 
- ll or 13 B, or D 

The preferred sign representation is 12 for "+" and 13 for "-", The 


length L is the number of digits in the packed decimal string (not 
counting the sign) and must be in the range @ through 31. When the 
number of digits is odd, the digits and the sign fit in L/2 (integer 
part only) + 1 bytes. When the number of digits is even, it is required 
that an extra "@" digit appear in the high nibble (bits 7:4) of the 
first byte of the string. Again the length in bytes of the String is 
L/2 + l. 


The address A of the string specifies the byte of the string containing 
the most significant digit in its high nibble. Digits of decreasing 
Significance are assigned to increasing byte addresses and from high 
nibble to low nibble within a byte. Thus "+123" has length 3 and is 
represented: 


7 4 3 y) 

pessoas os se + 

| 1 | 2 | A 
f=-H--== eer + 

| 3 | 12 | :+A+t+1 
foc aeoas eens + 


and "-12" has length 2 and is represented: 
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7 4 3 4) 

fpo—--- $+—-----—-- + 

| Q | 1 | : A 
$-—-—---—- $—-—------ + 

| 2 | 13 CO A+l 
$o------ f—_—-—-——--— + 
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23 PROCESSOR STATE 


The processor state consists of that portion of a process's state which, 
while the process is executing, is stored in processor registers rather 
than memory. The processor state described here consists of that 
accessible to non-privileged software. Certain additional processor 
state is described in Chapters 5, 6, and 7. 


The non-privileged processor state includes 16 32-bit general purpose 
registers denoted Rn where n is in the range @ through 15 and a 16-bit 
processor status word (PSW). Where there is ambiguity (e.g., n is an 
arithmetic expression) the notation R(n] is also used to denote the 
register. The general purpose registers are used for temporary storage, 
accumulators, index registers, and base registers. A register 
containing an address is termed a base register. A register containing 
an address offset (in multiples of operand size, see Chapter 3) is 
termed an index register. 


The bits of a register are numbered from the right @ through 31: 


Certain of the registers are assigned special meaning by the VAX-11 
architecture: 


1. R15 is the program counter (PC). PC contains the address of 
the next instruction byte of the program. 


2. R14 is the stack pointer (SP). SP contains the address of the 
top of the processor defined stack. 


3. R13 is the current frame pointer (FP). The VAX-11 procedure 
call convention (see VAX/VMS Run Time Library Reference Manual) 
builds a data structure on the stack called a stack frame. FP 
contains the address of the base of this data structure. 


4. R12 is the argument pointer (AP). The VAX-11 procedure call 
convention uses a data structure termed an argument list. AP 
contains the address of the base of this data Structure. 


Note that these registers are all used as base registers. The 
assignment of special meaning to these registers does not generally 
preclude their use for other purposes. However, as will be seen in 
Chapter 3, PC cannot be used aS an accumulator, temporary, or index 
register. 


When a datum of type byte, word, longword, or F floating is stored in a 
register, the bit numbering in the register corresponds to the numbering 
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in memory. Hence a byte is stored in register bits 7:6, a word in 
register bits 15:9, and longword or F floating, in register bits 31:9. 
A byte or word written to a register writes only bits 7:98 and 15:9 
respectively; the other bits are unaffected. A byte or word read from 
a register reads only bits 7:4 and 15:@ respectively; the other bits 
are ignored. 


When a quadword, D_ floating or G floating datum is stored in a_ register 
R{n], it is actually stored in 2 adjacent registers R[n] and R[{ntl]. 
Because of restrictions on the specification of PC (see Chapter 3) 
wraparound from PC to R@ is UNPREDICTABLE. Bits 31:80 of the datum are 
Stored in bits 31:98 of register R[n] and bits 63:32 of the datum are 
stored in bits 31:@ of register R[{ntl]. 


When an octaword or aH floating datum is stored in register R[n], it is 
actually stored in adjacent registers R[n], R{ntl], R{n+2], and R[nt+3]. 
Because of restrictions on the specification of PC (see Chapter 3) 
wraparound from PC to R@ is UNPREDICTABLE. Bits 31:8 of the datum are 
stored in bits 31:0 of register R{[n], bits 63:32 in bits 31:8 of 
register R{[ntl], bits 95:64 in bits 31:80 of register R[n+2], and bits 
127:96 in bits 31:0 of register R[n+3]. 


With one restriction, a variable length bit field may be specified in 
the registers: the starting bit position P must be in the range @ 
through 31. As for quadword, D floating, and G floating, a pair of 
registers R[n] and R[{ntl] is treated as a 64-bit register with bits 31:90 
in register R[n] and bit $3:32 in register R[ntl]. 


None of the string data types stored in registers can be processed by 
the VAX-11 string instructions. Thus there is no. architectural 
Specification of the representation of strings in registers. 
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2.4 PROCESSOR STATUS WORD 


The processor status word (PSW) contains the condition codes which give 
information on the results produced by previous instructions and the 
exception enables which control the processor action on certain 
exception conditions (see Chapter 6). The format of the PSW is: 


1 

5 876543218 
$m — - — — — — - - $$ - $$ — F -— FH — FFF 
| IDIFIT] | | | ol! 
| MBZ IVIUIVITIN|IZIVICc] 
fm nn HF Ft $F FF Ft 


The condition codes are UNPREDICTABLE when they are affected by 
UNPREDICTABLE results. The VAX-1ll procedure call instructions (See 
Chapter 4) conditionally set the IV and DV enables, clear the FU enable, 
and leave the T enable unchanged at procedure entry. 


2.461 € Bit 


When set, the C (carry) condition code bit indicates’ the last 
instruction which affected C had a carry out of the most significant bit 
of the result or a borrow into the most significant bit. When C is 
clear, there was no carry or borrow. 


2.4.2 V Bit 


When set, the V (overflow) condition code bit indicates that the last 
instruction which affected V produced a result whose magnitude was too 
large to be properly represented in the operand which received the 
result or there was a conversion error. When V is clear, there was no 
overflow or conversion error. 


2.4.3 Z Bit 


When set, the Z (zero) condition code indicates that the last 
instruction which affected Z produced a result which was 9. When Z is 
clear, the result waS non-zero. 


2.4.4 N Bit 


When set, the N (negative) condition code bit indicates that the last 
instruction which affected N produced a result which was negative. When 
N is clear, the result was poSitive (or zero). 
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2.4.5 T Bit 


When set at the beginning of an instruction, the T (trace) bit causes 
the TP bit in the Processor Status Longword to be set (See Chapter 5). 
When TP is set at the end of an instruction, a trace fault is taken 
before the execution of the next instruction. See Chapter 6 for 
additional information on the trace fault. 


2.4.6 IV Bit 


When set, the IV (integer overflow) bit forces an integer overflow trap 
after execution of an instruction which produced an integer result that 
overflowed or had a conversion error. When IV is clear, no _ integer 
overflow trap occurs. (However, the condition code V bit is still set.) 


2.4.7 FU Bit 


When set, the FU (floating underflow) bit forces a floating underflow 
fault if the result of a floating point instruction is too small in 


magnitude to be represented in the result operand. When FU is clear, no 
underflow fault occurs. 


2.4.8 DV Bit 


When set, the DV (decimal overflow) bit forces a decimal overflow trap 
after execution of an instruction which produced an overflowed decimal 
(numeric string, or packed decimal) result or had a conversion error. 
When DV is clear, no trap occurs. (However, the condition code V bit is 
still set.) 
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2.5 PERMANENT EXCEPTION ENABLES 


The processor action on certain exception conditions is not controlled 
by bits in the PSW. Traps or faults always result from these exception 
conditions. 


2.5.1 Divide By Zero 


A divide by zero trap is forced after the execution of integer, or 
decimal division instruction which has a zero divisor. A fault occurs 
on a floating division instruction which has a zero divisor. 


2.5.2 Floating Overflow 


A floating overflow fault is forced after the execution of a floating 
point instruction which produced a result too large to be represented in 
the result operand. 


2.6 INSTRUCTION FORMAT 


VAX-l11 has a variable length instruction format. An instruction 
Specifies an operation and 8 to 6 operands. An operation specifier is 
termed an opcode. Depending on the instruction the opcode is 1 or 2 
bytes long. An operand specifier indicates the addressing mode used to 
access the operand and may be 1 or 2 bytes. An operand specifier may be 
followed by a specifier extension, an address, or immediate data. The 
format of an n operand instruction is: 


opcode 

operand specifier l 

specifier extension, address, or immediate data 1 (if needed) 
operand specifier 2 


operand specifier n 
specifier extension, address, or immediate data n (if needed) 


See Chapter 3 for a full description of addressing modes. See Chapter 4 
for a definition of the instructions. See Appendix A for a summary of 
all operands, instructions, and their binary assignments. 
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2.1 SEPARATION OF PROCEDURE AND DATA 


The VAX-ll architecture encourages (and provides the mechanisms’ to 
facilitate) separation of procedure (instructions) and writable data. 
Procedures may not write data which is to be subsequently executed as an 
instruction without an intervening REI instruction being executed (See 
Chapter 6) or an intervening context switch occurring (See Chapter 7). 
If no REI or context switch occurs between a procedure writing data as 
instructions to be executed, and those instructions being executed, the 
instructions executed are UNPREDICTABLE. 


2.8 I/O STRUCTURE 


Generally, the VAX-11 I/0 structure closely follows that of the PDP-1ll. 
An I/0 device controller is defined by a set of registers. The 
registers are asSigned addresses in the physical address Space. 
Commands are issued to I/O controllers by the processor writing these 
registers; controllers return status by writing these registers and the 
processor subsequently reading them. Since the registers have memory 
addresses, ordinary instructions can read or write them; no special I/0 
instructions are needed. The normal memory management mechanism 
controls access to device controller registers. 


2.9 INTERRUPT STRUCTURE 


A VAX-11 processor provides a 32 level vectored priority interrupt 
system. This is described in detail in Chapter 6. 


CHAPTER 3 
INSTRUCTION FORMATS AND ADDRESSING MODES 


5-May-80 -- Rev 7 


3.1 OPCODE FORMATS 


An instruction is specified by the byte address A of its opcode: 


The opcode may extend over 2 bytes; the length depends on the’ contents 
of the byte at address A. If, and only if, the value of the byte is FC 
(hex) through FF (hex) is the opcode 2 bytes long: 
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3.2 OPERAND SPECIFIERS 


Each instruction takes a specific sequence of operand specifier types. 
An operand specifier type conceptually has two components: the access 
type and the data type. 


The access types include: 
1. Read - the specified operand is read only. 
2. Write - the specified operand is written only. 


3. Modify - the specified operand is read, potentially modified, 
and written. This is not done under a memory interlock. 


4. Address - the address of the specified operand in the form of a 
longword is the actual instruction operand. The specified 
operand is not accessed directly although the instruction may 
subsequently use the address to access that operand. 


5. Variable bit field base address - same as address access’ type 
except for register mode. In register mode, the field is 
contained in register n designated by the operand specifier (or 
register ntl concatenated with register n). This access type 
is a special variant of the address access type. 


6. Branch - no operand is accessed. The operand specifier itself 
is a branch displacement. 


Types 1 - 5 are termed general mode addressing and are discussed in 
Section 3.4. Type 6 is termed branch mode addressing and is discussed 
in Section 3.6. 
The data types include: 

1. Byte 

2. Word 


3. Longword and F floating which are equivalent for addressing 
mode considerations. 


4. Quadword, and D floating and G floating which are _ similarly 
equivalent. 


5. Octaword and H floating which are also similarly equivalent. 


For the address and branch access types which do not directly reference 
operands, the data type indicates: 


1. Address - the operand size to be used in the address 
Calculation in autoincrement, autodecrement, and index modes. 
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2. Branch - the size of the branch displacement. 
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3.3 NOTATION 


To describe the addressing modes the following is used: 


+ - addition 

- - subtraction 

* - multiplication 

<- - is replaced hy 

= - is defined as 

' - concatenation 

Rn or R[n] - the contents of register n 
PC or SP - the contents of register 


15 or 14 respectively 


NOTE 


In the formal descriptions of the 
addressing modes Rn or PC, for example, 
always means the contents of register n or 
register 15. When there is no ambiguity, 
Rn or PC, for example, is often used in 
text as the name of register n or register 


L5z 

(x) - the contents of a location in memory 
whose address is x. 

{ } - arithmetic parentheses used 
to indicate precedence 

SEXT (x) - x is sign extended to size 
of operand needed 

ZEXT (x) - x is zero extended to size 
of operand needed 

OA - operand address 

! - comment delimiter 


Each general mode addressing description includes the definition of the 
operand address, and the specified operand. For operand specifiers of 
address access type, the operand address is the actual instruction 
operand; for other access types the specified operand is’ the 
instruction operand. The branch mode addressing description includes 
the definition of the branch address. 
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3.4 GENERAL MODE ADDRESSING FORMATS 
3.4.1 Register Mode 


The operand specifier format is: 


No specifier extension follows. 


In register mode addressing the operand is the contents of register n 
(or register n+l concatenated with register n for quadword, D floating, 
and certain field operands): 


operand = Rn lif one register 
or 
R{nt+1]'Rn lif two registers 
or 
R{n+3]) 'R[{n+2])'R[nt+1]'Rn lif four registers 


Because registers do not have memory addresses, the operand address is 
not defined, and register mode may not be used for operand specifiers of 
address access type (except in the case of the base address for variable 
bit field instructions, see Chapter 4). If it is, an illegal addressing 
mode fault results (See Chapter 6). PC may not be used in register mode 
addressing. If PC is read, the value read is UNPREDICTABLE. If PC is 
written, the next instruction executed or the next operand specified is 
UNPREDICTABLE. Likewise, SP may not be used in register mode addressing 
for an operand which takes two adjacent registers. Again, if it is, the 
results are UNPREDICTABLE in the same _ fashion. t£ PC is used in 
register mode for a write access type operand which takes 2 adjacent 
registers, the contents of R@® are UNPREDICTABLE. If R12, R13, SP, or PC 
are used in register mode addressing for an operand which takes’ four 
adjacent registers, the results are UNPREDICTABLE. If PC is used in 
register mode for a write access type operand which requires 4 adjacent 
registers, the contents of R®@, Rl, and R2 are UNPREDICTABLE. Likewise, 
if Rl3 is used in register mode for a write access type operand which 
takes 4 adjacent registers, the contents of R@ are UNPREDICTABLE; and, 
if SP is used in register mode for a write access type operand which 
takes 4 adjacent registers, the contents of R® and R1 are UNPREDICTABLE. 


The assembler notation for register mode is Rn. 
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3.4.2 Register Deferred Mode 


The operand specifier format is: 


No specifier extension follows. 


In register deferred mode addressing, the address of the operand is’ the 
contents of register n: 


operand = (OA) 
PC may not be used in register deferred mode addressing. If it is, the 
address of the operand (and whether the operand is written if it is of 
modify or write access type) is UNPREDICTABLE. 


The assembler notation for register deferred mode is (Rn). 


3.4.3 Autoincrement Mode 


The operand specifier format is: 


7 4 3 Q 
4+------- +------- + 
| 8 | Rn | 
+------- +------- + 
No specifier extension follows. If Rn denotes PC, immediate data 


follows, and the mode is termed immediate mode. 


In autoincrement mode addressing, the address of the operand is’ the 
contents of register n. After the operand address is determined, the 
Size of the operand in bytes (1 for byte; 2 for word; 4 for longword 
and F floating; 8 for quadword, G floating and D floating; and 16 for 
octaword, and H floating )is added to the contents of register n and the 
contents of register n is replaced by the result: 


Rn <- Rn + size 
operand = (OA) 
Immediate mode may not be used for operands of modify or write access 


type. If immediate mode is used for an operand of modify access type, 
the value of the data read is UNPREDICTABLE. If immediate mode is’ used 
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for an operand of modify or write access type, the address at which the 
operand is written (and whether it is written) is UNPREDICTABLE. 


The assembler notation for autoincrement mode is (Rn)+. For immediate 


mode the notation is I“#constant where constant is the immediate data 
which follows. 


3.4.4 Autoincrement Deferred Mode 


The operand specifier format is: 


No specifier extension follows. If Rn denotes PC, a longword address 
follows, and the mode is termed absolute mode. 


In autoincrement deferred mode addressing, the address of the operand is 
the contents of a longword whose address is the contents of register n. 
After the operand address is determined, 4 (the size in bytes of a 
longword address) is added to the contents of register n and the 
contents of register n is replaced by the result: 


OA = (Rn) 
Rn <- Rn + 4 
operand = (OA) 
The assembler notation for autoincrement deferred mode is @(Rn)+. For 


absolute mode the notation is @#taddress where address is the longword 
which follows. 
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3.4.5 Autodecrement Mode 


The operand specifier format is: 


No specifier extension follows. 


In autodecrement mode addressing, the size of the operand in bytes (1 
for byte; 2 for word; 4 for longword and F floating; 8 for quadword, 
G floating and D floating; and 16 for octaword, and H floating )is 
subtracted from the contents of register n and the contents of register 
n are replaced by the result. The updated contents of register n is the 
address of the operand: 


Rn <- Rn - size 


operand = (0A) 


PC may not be used in autodecrement mode. If it is, the address of the 
operand (and whether the operand is written if it is of modify or write 
access type) 1S UNPREDICTABLE and the next instruction executed or _ the 
next operand specified is UNPREDICTABLE. 


The assembler notation for autodecrement mode is -(Rn). 
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There are 3 operand specifier formats: 


The specifier extension is a signed byte displacement, which follows the 
operand specifier. This is termed byte displacement mode. 


The specifier extension is a signed word displacement, which follows the 
operand specifier. This is termed word displacement mode. 


The specifier extension is a longword displacement, which follows’ the 
operand specifier. This is termed longword displacement mode. 


In displacement mode addressing, the displacement (after being Sign 
extended to 32 bits if it is byte or word) is added to the contents of 
register n and the result is the operand address: 


OA = Rn + SEXT (displ) lif byte or word displacement 
Or 
Rn + displ !if longword displacement 


operand = (OA) 


If Rn denotes PC, the updated contents of PC is used. The updated 
contents of PC is the address of the first byte beyond the specifier 
extension. 


The assembler notation for byte, word, and long displacement mode is 
B°D(Rn), W°D(Rn), and L*“D(Rn) respectively where D = displ. 
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3.4.7 Displacement Deferred Mode 


There are 3 operand specifier formats: 


The specifier extension is a Signed byte displacement, which follows the 
operand specifier. This is termed byte displacement deferred mode. 


The specifier extension is a Signed word displacement, which follows the 
operand specifier. This is termed word displacement deferred mode. 


The specifier extension is a longword displacement, which follows’ the 
operand specifier. This is termed longword displacement deferred mode. 


In displacement deferred mode addressing, the displacement (after being 
Sign extended to 32 bits if it is byte or word) is added to the contents 
of register n and the result is the address of a longword whose contents 
is the operand address: 


OA = (Rn + SEXT (displ) ) !if byte or word displacement 
or 
(Rn + displ) !if longword displacement 


operand = (OA) 


If Rn denotes PC, the updated contents of the PC is used. The updated 


contents of PC is the address of the first byte beyond the specifier 
extension. 


The assembler notation for byte, word, and longword displacement 
deferred mode is @B”D(Rn), @W°D(Rn), and @L“D(Rn) respectively where D = 
displ. 
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3.4.8 Literal Mode 


The operand specifier format is: 


No specifier extension follows. 


For operands of data type byte, word, longword, quadword, octaword 
operand is the zero extenSion of the 6-bit literal field: 


operand = ZEXT (literal) 


Thus for these data types, literal mode may be used for values in 
range @ through 63. 


For operands of data type F_ floating, G floating, D floating, 
H floating, the 6-bit literal field is composed of 2 3-bit fields: 


where exp is exponent and fra is fraction. The exp and fra fields 
used to form a F_ floating or D floating operand as follows: 


lil 

5 4 7 6 4 3 4) 
$—$—--------------- +----- +------- + 

18 | 128 + exp | fra | 4 | 
fops-----— +--+ +--+ 4---- += + 

| i) | :A+2 
+--—-+--------------------------- + 

| Q | sA+4 
$o--- +--+ + + 

| Q | sA+6 
$a an + + + + 


where bits 63:32 are not present in a F floating operand. 


the 


the 


and 


are 
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The exp and fra fields are used to form a G floating operand as follows: 


1 il 

5 4 4 3 1 @ 
Ee a ee ete pe ree ae arene +-+ 

| | 1624 + exp | fra |G] 
SS ee ee eee eee eee fees $—+ 

| 4) | sA+2 
bf ete Seren ee eh ete lei + 

| i) | sA+4 
Oh ase aee + 

| g | :A+6 
joe Moeooses eae ee See aoe eee + 


The exp and fra fields are used to form a H floating operand as follows: 


11 

5 4 4) 
pope ae Sie eee ee + 

1 | 16384 + exp | 
eat a es cat Sh pea Se + 

| fra | Q | s:A+2 
+----- ee ee ee eee ee + 

| Gg | :A+4 
Po eee ey eee oa ae asa ae a ees + 

| Q | sA+6 
fae e ee eee eo eases oo + 

| G | :A+8 
pe ee ep eee ee eo cesses + 

| 4) | sA+190 
pear eee oe ee ee + 

| G | sA+12 
Pee eee eee iets + 

| g | :A+14 
Pee e cae eee eee + 


The range of values available is given in the following table: 


E EB S22 
| 
V 

0 1 2 3 4 5 6 7 
9 1/2 9/16 5/8 11/16 3/4 13/16 7/8 15/16 
1 41 1 1/8 1 1/4 1 3/8 1 1/2 1 5/8 1 3/4 1 7/8 
2 2 2 1/4 2 1/2 2 3/4 3 3 1/4 3.1/2 3 3/4 
3. 4 4 1/2 5 5 1/2 6 6 1/2 7 7 1/2 
4 8 9 10 11 12 13 14 15 
5 16 18 20 22 24 26 28 30 
6 32 36 40 44 48 52 59 60 
7 64 72 80 88 96 164 112 120 


Table 1. Floating Literals 
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Because there is no operand address, literal mode addressing may not be 
used for operand specifiers of address access type. Literal mode 
addressing may also not be used for operand specifiers of write or 
modify access type. If literal mode is used for operand specifiers of 
either address, modify, or write access type, an illegal addressing mode 
fault results (see Chapter 6). 


Literal mode addressing is a very efficient way of specifying integer 
constants in the range 9 to 63 and the floating point constants given in 
Table 1. Literal values outside the indicated range may be obtained by 
autoincrement mode using PC (immediate mode). 


The assembler notation for literal mode is S“#literal. 


3.4.9 Index Mode 


The operand specifier format is: 


Bits 15:8 contain a second operand specifier (termed the base operand 
Specifier) for any of the addressing modes except register, literal or 
index. The specification of register, literal, or index addressing mode 
results in an illegal addressing mode fault (see Chapter 6). If the 
base operand specifier requires a specifier extension, it immediately 
follows. The base operand specifier is subject to the same restrictions 
as would apply if it were used alone. If the use of some _ particular 
Specifier is illegal (i.e., causes a fault or UNPREDICTABLE behavior) 
under some circumstances, then that specifier is similarly illegal as a 
base operand specifier in index mode under the same circumstances. 


The operand to be specified by index mode addressing is termed the 
primary operand. The base operand specifier is used normally to 
determine an operand address. This address is termed the base operand 
address (BOA). The address of the primary operand specified is 
determined by multiplying the contents of the index register x by the 
size of the primary operand in bytes (1 for byte; 2 for word; 4 for 
longword and F floating; 8 for quadword, D floating and G floating; 
and 16 for octaword, and H floating), adding BOA, and taking the result: 


OA = BOA + {size * (Rx) } 
operand = (0A) 
If the base operand specifier is for autoincrement or autodecrement mode 


the increment or decrement size is the size in bytes of the primary 
operand. 


Instruction Formats and Addressing Modes 5-May-88 -- Rev 7 Page 3-14 
GENERAL MODE ADDRESSING FORMATS 


Index mode addressing permits very general and efficient accessing of 
arrays. The base address of the array is determined by the operand 
address caculation of the base operand specifier. The contents of the 
index register is taken as a logical index into the array. The logical 
index is converted into a real (byte) offset by multiplying the contents 
of the index register by the size of the primary operand in bytes. 


Certain restrictions are placed on the index register x. PC cannot be 
used aS an index register. If it is, a reserved addressing mode fault 
occurs (see Chapter 6). If the base operand specifier is for an 
addressing mode which results in register modification (i.e. 
autoincrement mode, autodecrement mode, or autoincrement deferred mode), 
the same register cannot be the index register. If it is, the primary 
operand address is UNPREDICTABLE. 


The names of the addressing modes resulting from index mode addressing 
are formed by adding the suffix "indexed" to the addressing mode of the 
base operand specifier. The following gives the names and assembler 
notation. The index register is designated Rx to distinguish it from 
the register Rn in the baSe operand specifier. 
1. register deferred indexed - (Rn) [Rx] 
2. autoincrement indexed - (Rn)+[(Rx] 
or immediate indexed - I”“#constant[Rx] which is recognized by 
the assembler but is not generally useful. Note that the 
operand address is independent of the value of constant. 
3. autoincrement deferred indexed - @(Rn)+[Rx] 
or absolute indexed - @#address [Rx] 


4. autodecrement indexed - -(Rn) [Rx] 


5. byte, word, or longword displacement indexed - 
B™D (Rn) [Rx] ,W°D (Rn) [Rx], or L“D (Rn) [Rx] 


6. byte, word, or longword displacement deferred indexed = 
@B°D (Rn) [Rx] ,@W°D (Rn) [Rx], or @L“D (Rn) [Rx] 
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3.5 SUMMARY OF GENERAL MODE ADDRESSING 


3.5.1 General Register Addressing 


7 4 3 g 
+------- +------- + 
| mode | reg | 
+------- +------- + 
Hex Dec Name Assembler rmwavyv PC SP AP& Index- 
FP able 
8-3 @-3 literal S“#literal yf EEE - - - f 
4 4 indexed i [Rx] yyyyy £ y y £ 
5 5 register Rn yyyfy u uq uo £ 
6 6 register deferred (Rn) yyyyy u y y y 
7 7 autodecrement - (Rn) yyyyy u y y ux 
8 8 autoincrement (Rn) + yyyyy p y y ux 
9 9 autoincrement 
deferred @(Rn) + yyyyy p y y ux 
A 10 byte displacement B~D (Rn) yyyyy p y y y 
B 11 byte displacement 
deferred @B~D (Rn) yyyyy p y y y 
C 12 word displacement WD (Rn) yyyyy p y y y 
D 13 word displacement 
deferred @W*~D (Rn) yyyyy p y y y 
E 14 longword displacement LD (Rn) yyyyy p y y y 
F 15 longword displacement 
deferred @L“D (Rn) yyyyy °) y y y 
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3.5.2 Program Counter Addressing (reg=15) 


7 4321 @ 
feet FF 4+ 
| mode |111 1] 
ee 


Hex Dec Name 


8 8 immmediate 

9 9 absolute 

A 10 byte relative 

B 11 byte relative 
deferred 

Cc 12 word relative 

D 13 word relative 


deferred 
E 14 long word relative 
F 15 long word relative 
deferred 


Key to 3.5.1 and 3.5.2 


- displacement 


- UNPREDICTABLE 


e&caormir- UW 
1 


Assembler 


I“*#constant 
@#address 
B°“ address 
@B“ address 


W° address 
@W° address 


L“ address 
@L“address 


- any indexable addressing mode 
- logically impossible 

- reserved addressing mode fault 
Program Counter addressing 


rx 
=| 
= 
9) 
< 


<< MM MNNKN 


me KX NSNMMKME 


—m—< SS MMMM GS 


—mKS MXM NMNMNNM 
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<< MM NNN 
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Indexable? 


_m<S KX KMXMNK 


q - UNPREDICTABLE for quad, octa, D floating, G floating, and 
H floating (and field if position + size greater than 32) 
uo —- UNPREDICTABLE for octa, and H format 


ux - UNPREDICTABLE for index register same 
- yes, always valid addressing mode 


Y 
r- read access 
m- modify access 
w - write access 

a - address access 
v - field access 


as base register 
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3.6 BRANCH MODE ADDRESSING FORMATS 


There are 2 operand specifier formats: 


The operand specifier is a signed word displacement. 


In branch displacement addressing, the byte or word displacement is sign 
extended to 32 bits and added to the updated contents of PC. The 
updated contents of PC is the address of the first byte beyond _ the 
operand specifier. The result is the branch address A: 


A = PC + SEXT (displ) 
The assembler notation for byte and word branch displacement addressing 


is A where A is the branch address. Note that the branch address and 
not the displacement is used. 
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3.7 OPERAND SPECIFIER CONVENTIONS 
The following 3 steps are performed by each instruction: 


1. Each operand specifier in order of instruction stream 
occurrence is treated as follows: 


a. If read access type: evaluate the operand address, 
read the operand, and save it. 


b. If write access type: evaluate the operand address 
and save it. 


c. If modify access type: evaluate the operand 
address and save it; read the operand and save it. 


ad. If address access type: evaluate the address and 
save it. 


e. If branch access type: save the operand specifier. 


2. Perform the operation indicated by the instruction. 


3. Store the result(s) uSing the saved addresses in the order 
indicated by the occurrence of operand specifiers in the 
instruction stream. 


NOTE 


The string (character, zoned decimal, and packed 
decimal) instructions are an exception to 2. and 3. 
in that partial results are stored before the 
instruction operation is completed. The variable bit 
field instructions treat the position, size, and _ base 
address operand specifiers as the specification of an 
implied field operand specifier (see Appendix A). If 
multiple exceptions occur during 1. and 2., the order 
in which they are taken is UNPREDICTABLE. This can 
occur, for example, in a floating point instruction 
whose destination operand specifier of write access 
type uses a reserved addressing mode and the operation 
results in an overflow fault. 


The implications of these conventions are: 


1. Autoincrement and autodecrement operations occur as the operand 
specifiers are processed, and subsequent operand specifiers use 
the updated contents of registers modified by those operations. 
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23 


Other than as indicated by 1, all input operands are read, and 
all addresses of output operands computed before any results of 
the instruction are stored. 


An operand of modify access type is not read, modified, and 
written as an indivisible operation; therefore, modify access 
type operands cannot be used for synchronization. (For 
synchronization instructions, See Chapter 8.) 


T£ an instruction references two operands of write or modify 
access type at the same address, the first will be overwritten 
by the second. 


BLANK 


CHAPTER 4 
INSTRUCTIONS 
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4.1 INSTRUCTION SET 


This chapter describes the instructions generally used by all software 


across all implementations of the VAX-11l architecture. Certain 
instructions which are specific to specialized portions of the VAX-11 
architecture (e.g., Memory management, interrupts and exceptions, 


process dispatching, and processor registers) and are generally used by 
privileged software are described in the chapters describing those 
portions of the architecture. A concise list of instructions and opcode 
assignments appears in Appendix A. 


4.1.1 Instruction Descriptions 
The instruction set is divided into 12 major sections: 
1. Integer arithmetic and logical 
2. Address 
3. Variable length bit field 
4. Control 
5. Procedure call 
6. Miscellaneous 
7. Queue 
8. Floating point 


9. Character string 


Instructions 12-Feb-82 -- Rev 7 Page 4-2 
INSTRUCTION SET 


10. 
li. 


12. 


Cyclic Redundancy Check 
Decimal string 


Edit 


Within each major section, instructions which are closely related are 


combined 


into groups and described together. The instruction group 


description is composed of the following: 


ae 


2 


The group name. 

The format of each instruction in the group. This gives the 
name and type of each instruction operand specifier and the 
order in which it appears in memory. Operand specifiers from 
left to right appear in increasing memory addresses. 

The operation of the instruction. 

The effect on condition codes. 

Exceptions specific to the instruction. Exceptions which are 
generally possible for all instructions (e.g., illegal or 
reserved addressing mode, T-bit, memory management violations, 
etc.) are not listed. 


The opcodes, mnemonics, and names of each instruction in the 
group. The opcodes are given in hex. 


A description in English of the instruction. 


Optional notes on the instruction and programming examples. 
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INSTRUCTION SET 


4.1.2 


Operand 


where: 


3% 
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Operand Specifier Notation 
specifiers are described in the following way: 


<name>.<access type><data type> 


Name is a suggestive name for the operand in the context of the 
instruction. The name is often abbreviated. 


Access type is a letter denoting the operand specifier access 


Calculate the effective address of the specified 
operand. Address is returned in a longword 

which is the actual instruction operand. Context 

of address calculation is given by <data type>; 

1.65% size to be used in autoincrement, 
autodecrement, and indexing. 


No operand reference. Operand specifier is a 
branch displacement. Size of branch displacement 
is given by <data type>. 


Operand is read, potentially modified and written. 
Note that this is NOT an indivisible memory 
operation. Also note that if the operand is not 
actually modified, it may not be written back. 
However, modify type operands are always checked 
for both read and write accessability (See 

Chapter 5). 


Operand is read only. 


Calculate the effective address of the specified 
operand. If the effective address is in memory, 
the address is returned in a longword 

which is the actual instruction operand. Context 
of address calculation is given by <data type>. 
If the effective address is Rn, the operand is 

in Rn or R{nt1]'Rn. 


Operand is written only. 


Data type is a letter denoting the data type of the operand: 
b - byte 


d - D floating 
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fF - F_ floating 
- G floating 
h - H_ floating 


1 - longword 

Oo - octaword 

q - quadword 

w - word 

x - first data type specified by instruction 


y - second data type specified by instruction 


4.1.3 Operation Description Notation 
The operation of each instruction is given as a sequence of control and 
assignment statements in an ALGOL-like syntax. No attempt is made to 
define the syntax formally, it is assumed to be familiar to the reader. 
The notation used is an extension of that introduced in Chapter 3. 

+ — addition 

- - subtraction, unary minus 


* —- multiplication 


/ - division (quotient only) 


** — exponentiation 
" - concatenation 
<- - is replaced by 


= - is defined as 
Rn or R[n] - contents of register Rn 


PC, SP, FP, or AP - the contents of register R15, R14, R13, 
or R12 respectively 


PSW - the contents of the processor status word 
PSL - the contents of the processor status long word 


(x) - contents of memory location whose address is x 
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(x)+ - contents of memory location whose address is x; 
X incremented by the size of operand referenced 
at x 

-(x) - x decremented by size of operand to be referenced 


at xX; contents of memory location whose address is x 


<x:y> - a modifier which delimits an extent from bit 
position x to bit position y inclusive 


<x1l,x2,.e-,Xn> - a modifier which enumerates bits xl,x2,...,xn 
{ } - arithmetic parentheses used to indicate precedence 
AND - logical AND 

OR - logical OR 

XOR - logical XOR 

NOT - logical (ones) complement 

LSS - less than signed 

LSSU - less than unsigned 

LEQ - less than or equal signed 

LEQU - less than or equal unsigned 

EQL - equal signed 

EQLU - equal unsigned 

NEQ - not equal signed 

NEQU - not equal unsigned 

GEQ - greater than or equal signed 

GEQU - greater than or equal unsigned 

GTR - greater than signed 


GTRU - greater than unsigned 


SEXT (x) - x is Sign extended to size of operand 
needed 
ZEXT (x) - x 1S zero extended to size of operand needed 


REM(x,y) - remainder of x divided by y, such that x/y and 
REM(x,y) have the same sign 
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MINU(x,y) - minimum unsigned of x and y 


MAXU (x,y) - maximum unsigned of x and y 


The following conventions are used: 


Ls 


Other than that caused by ( )+, or -( ), and the advancement of 
PC, only operands or portions of operands appearing on the left 
side of assignment statements are affected. 


No operator precedence is assumed, other than that replacement 
(<-) has the lowest precedence. Precedence is indicated 
explicitly by { }. 


All arithmetic, logical, and relational operators are defined 
in the context of their operands. For example "+" applied to 
floating operands means a floating add while "+" applied _ to 
byte operands is an integer byte add. Similarily, "LSS" is a 
floating comparison when applied to floating operands’ while 
"LSS" is an integer byte comparison when applied to byte 
operands. 


Instruction operands are evaluated according to the operand 
specifier conventions (See Chapter 3). The order in which 
operands appear in the instruction description has no effect on 
the order of evaluation. 


Condition codes are in general affected on the value of actual 
stored results, not on "true" results (which might be generated 
internally to greater precision). Thus, for example, 2 
positive integers can be added together and the sum Stored, 
because of overflow, as a negative value. The condition codes 
will indicate a negative value even though the "true" result is 
clearly positive. 
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4.2 INTEGER ARITHMETIC AND LOGICAL INSTRUCTIONS 


The following instructions are described in this section. 


Instructions 
1. Add Aligned Word 1 
ADAWI add.rw, sum.mw 
2. Add 2 Operand 3 
ADD{B,W,L}2 add.rx, sum.mx 
3. Add 3 Operand 3 
ADD{B,W,L}3 addl.rx, add2.rx, sum.wx 
4. Add With Carry 1 
ADWC add.rl, sum.ml 
5. Arithmetic Shift 2 
ASH{L,Q} cnt.rb, src.rx, dst.wx 
6. Bit Clear 2 Operand 3 
BIC{B,W,L}2 mask.rx, dst.mx 
7. Bit Clear 3 Operand 3 
BIC{B,W,L}3 mask.rx, src.rx, dst.wx 
8. Bit Set 2 Operand 3 
BIS{B,W,L}2 mask.rx, dst.mx 
9. Bit Set 3 Operand 3 
BIS{B,W,L}3 mask.rx, Srce.rx, dsSt.wx 
10. Bit Test 3 
BIT{B,W,L} mask.rx, src.rx 
ll. Clear 4 
CLR{B,W,L,Q} dst.wx 
12. Compare 3 
CMP{B,W,L} srcl.rx, src2.rx 
13. Convert 6 
CVT{B,W,L}{B,W,L} src.rx, dst.wy 
All pairs except BB,WW,LL. 
14. Decrement 3 
DEC{B,W,L} dif.mx 
15. Divide 2 Operand 3 


DIV{B,W,L}2 divr.rx, quo.mx 
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16. Divide 3 Operand 3 
DIV{B,W,L}3 divr.rx, divd.rx, quo.wx 


17. Extended Divide 1 
EDIV divr.rl, divd.rq, quo.wl, rem.wl 


18. Extended Multiply 1 
EMUL mulr.rl, muld.rl, add.rl, prod.wq 


19. Increment 3 
INC{B,W,L} sum.mx 


28. Move Complemented 3 
MCOM{B,W,L} src.rx, dst.wx 

21. Move Negated 3 
MNEG{B,W,L} src.rx, dst.wx 

22. Move 4 
MOV{B,W,L,Q} src.rx, dst.wx 

23. Move Zero-Extended 3 
MOVZ{BW,BL,WL} src.rx, dst.wy 

24. Multiply 2 Operand 3 
MUL{B,W,L}2 mulr.rx, prod.mx 

25. Multiply 3 Operand 3 
MUL{B,W,L}3 mulr.rx, muld.rx, prod.wx 

26. Push Long 1 
PUSHL src.rl, {-(SP).wl} 

27. Rotate Long 1 
ROTL cnt.rb, sre.rl, dst.wl 

28. Add Aligned Word 1 

29. Subtract With Carry 1 


SBWC sub.rl, dif.ml 


39. Subtract 2 Operand 3 
SUB{B,W,L}2 sub.rx, dif.mx 


31. Subtract 3 Operand 3 
SUB{B,W,L}3 sub.rx, min.rx, dif.wx 


32. Test 3 
TST{B,W,L} srec.rx 


33. Exclusive OR 2 Operand 3 
XOR{B,W,L}2 mask.rx, dst.mx 
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34. Exclusive OR 3 Operand 3 
XOR{B,W,L}3 mask.rx, Src.rx, dst.wx 
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ADAWI Add Aligned Word Interlocked 
Format: 

opcode add.rw, sum.mw 
Operation: 

tmp <- add; 

{set interlock}; 

sum <- sum + tmp; 

{release interlock}; 
Condition Codes: 

N <- sum LSS @; 

Z <- sum EQL @; 

V <- {integer overflow}; 

C <- {carry from most significant bit}; 


Exceptions: 


reserved operand fault 
integer overflow 


Opcodes: 


58 ADAWI Add Aligned Word Inteérlocked 


Description: 


The addend operand is added to the sum operand and the sum operand is 
replaced by the result. The operation is interlocked against similar 


operations on other processors in a multiprocessor’ system. The 
destination must be aligned on a word boundary i.e. bit @ of the 
address of the sum operand must be zero. If it is not, a_ reserved 


operand fault is taken. 


Notes: 


l. Integer overflow occurs if the input operands to the add have 
the same sign and the result has the opposite sign. On 
overflow, the sum operand is replaced by the low order bits of 
the true result. 


2. If the addend and the sum operands overlap, the result and the 
condition codes are UNPREDICTABLE. 
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ADD Add 
Format: 

opcode add.rx, sum.mx 2 operand 

opcode addl.rx, add2.rx, sum.wx 3 operand 
Operation: 

sum <- sum + add; !2 operand 

sum <- addl + add2; !3 operand 
Condition Codes: 

N <- sum LSS @; 

Z <- sum EQL @; 

V <- {integer overflow}; 

C <- {carry from most significant bit}; 


Exceptions: 


integer overflow 


Opcodes: 
80 ADDB2 Add Byte 2 Operand 
81 ADDB3 Add Byte 3 Operand 
AG ADDW2 Add Word 2 Operand 
Al ADDW3 Add Word 3 Operand 
CO ADDL2 Add Long 2 Operand 
Cl ADDL3 Add Long 3 Operand 


Description: 


In 2 operand format, the addend operand is added to the sum operand and 
the sum operand is’ replaced by the result. In 3 operand format, the 
addend 1 operand is added to the addend 2 operand and the sum operand is 
replaced by the result. 


Notes: 


Integer overflow occurs if the input operands to the add have the _ same 
Sign and the result has the opposite sign. On overflow, the sum operand 
is replaced by the low order bits of the true result. 
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ADWC Add With Carry 
Format: 

opcode add.rl, sum.ml 
Operation: 

sum <- sum + add + C; 
Condition Codes: 

N <- sum LSS @; 

Z <- sum EQL @; 

Vv <- {integer overflow}; 

C <- {carry from most significant bit}; 
Exceptions: 

integer overflow 


Opcodes: 


D8 ADWC Add With Carry 


Description: 


The contents of the condition code C bit and the addend operand are 
added to the sum operand and the sum operand is replaced by the result. 


Notes: 


1. On overflow, the sum operand is replaced by the low order bits 
of the true result. 


2. The 2 additions in the operation are performed simultaneously. 
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ASH Arithmetic Shift 
Format: 

opcode cnt.rb, src.rx, dst.wx 
Operation: 

dst <- sre shifted cnt bits; 
Condition Codes: 

N <- dst LSS @; 

Z <- dst EQL 9; 

V <- {integer overflow}; 

C <- @; 
Exceptions: 


integer overflow 


Opcodes: 
78 ASHL Arithmetic Shift Long 
79 ASHQ Arithmetic Shift Quad 


Description: 


The source operand is arithmetically shifted by the number of bits 
specified by the count operand and the destination operand is replaced 
by the result. The source operand is’ unaffected. A positive count 
operand shifts to the left bringing @s into the least Significant bit. 
A negative count operand shifts to the right bringing in copies of the 
most sSignficant (sign) bit into the most significant bit. A 8 count 
operand replaces the desStination operand with the unshifted source 
operand. 


Notes: 


l. Integer overflow occurs on a left shift if any bit shifted into 
the sign bit position differs from the sign bit of the source 
operand. 


2. If cnt GTR 32 (ASHL) or cnt GTR 64 (ASHQ) the destination 
operand is replaced by @. 


3. If cnt LEQ -31 (ASHL) or cnt LEQ -63 (ASHQ) all the bits of the 
destination operand are copies of the sign bit of the source 
operand. 
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BIC Bit Clear 
Format: 
opcode mask.rx, dst.mx 2 operand 
opcode mask.rx, src.rx, dst.wx 3 operand 
Operation: 
dst <- dst AND {NOT mask}; 12 operand 
dst <- sre AND {NOT mask}; 13 operand 
Condition Codes: 


N <- dst LSS @; 


Z <- dst EQL @Q; 
V <- @; 
C <= C3 


Exceptions: 


none 
Opcodes: 
8A BICB2 Bit Clear Byte 
8B BICB3 Bit Clear Byte 
AA BICW2 Bit Clear Word 
AB BICW3 Bit Clear Word 
CA BICL2 Bit Clear Long 
CB BICL3 Bit Clear Long 


Description: 


In 2 operand format, the destination operand is ANDed with the ones 
complement of the mask operand and the destination operand is replaced 
by the result. In 3 operand format, the source operand is ANDed_ with 
the ones complement of the mask operand and the destination operand is 
replaced by the result. 
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BIS Bit Set 
Format: 

opcode mask.rx, dst.mx 2 operand 

opcode mask.rx, src.rx, dst.wx 3 operand 
Operation: 

dst <- dst OR mask; !2 operand 

dst <- sre OR mask; !3 operand 
Conditon Codes: 

N <- dst LSS @; 

Z <- dst EQL @; 

V <- @;3 

C <- C; 


Exceptions: 


none 
Opcodes: 
88 BISB2 Bit Set Byte 2 Operand 
89 BISB3 Bit Set Byte 3 Operand 
A8 BISW2 Bit Set Word 2 Operand 
AQ BISW3 Bit Set Word 3 Operand 
C8 BISL2 Bit Set Long 2 Operand 
‘C9 BISL3 Bit Set Long 3 Operand 
Description: 


In 2 operand format, the mask operand is ORed with the destination 
operand and the destination operand is replaced by the result. In 3 
operand format, the mask operand is ORed with the source operand and the 
destination operand is replaced by the result. 
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BIT Bit Test 
Format: 

opcode mask.rx, Src.rx 
Operation: 

tmp <- src AND mask; 
Conditon Codes: 

N <- tmp LSS @; 

Z <- tmp EQL @; 

V <- O; 

C <~- C; 


Exceptions: 


none 
Opcodes: 
93 BITB Bit Test Byte 
B3 BITW Bit Test Word 
D3 BITL Bit Test Long 


Description: 


The mask operand is ANDed with the source operand. Both operands’ are 
unaffected. The only action is to affect condition codes. 
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CLR 


Format: 


Clear 


opcode dst.wx 


Operation: 


dst <- @; 


Condition Codes: 


N <- 
Z << 
V<- 
C: <= 


Exceptions: 


none 
Opcodes: 
94 CLRB 
B4 CLRW 
D4 CLRL 
7C CLRQ 
7CFD CLRO 
Description: 


ARF ss 
me ~O BO WE 


Clear 
Clear 
Clear 
Clear 
Clear 


Byte 
Word 
Long 
Quad 
Octa 


The destination operand is replaced by @. 


Notes: 
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CMP 


Format: 


Compare 


opcode srcl.rx, src2.rx 


Operation: 


srcl 


- src2; 


Condition Codes: 


<- 
<— 
<— 
<- 


ASN Z 


Exceptions: 


none 
Opcodes: 
91 CMPB 
Bl CMPW 
Dl CMPL 


Description: 


The source l 
action is to 


srcl LSS src2; 
srcl EQL src2; 
0; 

srcl LSSU src2; 


Compare Byte 
Compare Word 
Compare Long 


operand is compared with the source 2. operand. 
affect the condition codes. 
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CVT Convert 
Format: 
opcode src.rx, dst.wy 
Operation: 
dst <- conversion of src; 
Condition Codes: 
N <- dst LSS @; 
Z <- dst EQL @; 
V <- {integer overflow}; 
C <- @; 
Exceptions: 
integer overflow 
Opcodes: 
99 CVTBW Convert Byte to Word 
98 CVTBL Convert Byte to Long 
33. CVTWB Convert Word to Byte 
32 CVTWL Convert Word to Long 
F6 CVTLB Convert Long to Byte 
F7 CVTLW Convert Long to Word 
Description: 
The source operand is converted to the data type of the destination 
operand and the destination operand is replaced by the result. 
Conversion of a shorter data type to a longer is done by sign extension; 
conversion of longer to a shorter is done by truncation of the higher 
numbered (most significant) bits. 


Notes: 


Integer overflow occurs if any truncated bits of the source operand are 
not equal to the sign bit of the destination operand. 
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DEC Decrement 
Format: 
opcode dif.mx 
Operation: 
aif <- dif - 1; 
Condition Codes: 
N <- dif LSS @; 
Z <- dif EQL @; 
V <- {integer overflow}; 
C <- {borrow into most significant bit}; 


Exceptions: 


integer overflow 


Opcodes: 
97 DECB Decrement Byte 
B7 DECW Decrement Word 
D7 DECL Decrement Long 


Description: 


One is subtracted from the difference operand and the difference operand 
is replaced by the result. 


Notes: 


l. Integer overflow occurs if the largest negative integer is 
decremented. On overflow, the difference operand is replaced 
by the largest positive integer. 


2. DECx dif is equivalent to SUBx S°“#1l, dif, but is 1 byte 
shorter. 


Instructions 12-Feb-82 -- Rev 7 Page 4-21 
INTEGER ARITHMETIC AND LOGICAL INSTRUCTIONS 


DIV Divide 

Format: 
opcode divr.rx, quo.mx 2 operand 
opcode divr.rx, divd.rx, quo.wx 3 operand 


Operation: 
quo <- quo / divr; !2 operand 
quo <- divd / divr; !3 operand 
Condition Codes: 
<- quo LSS @; 
<- quo EQL @; 


<- {integer overflow} OR {divr EQL 9}; 
<- @; 


QO Gn Z@ 


Exceptions: 


integer overflow 
divide by zero 


Opcodes: 
86 DIVB2 Divide Byte 2 Operand 
87 DIVB3 Divide Byte 3 Operand 
A6 DIVW2 Divide Word 2 Operand 
A7 DIVW3 Divide Word 3 Operand 
C6 DIVL2 Divide Long 2 Operand 
C7 DIVL3 Divide Long 3 Operand 


Description: 


In 2 operand format, the quotient operand is divided by the divisor 
operand and the quotient operand is replaced by the result. In 3 
operand format, the dividend operand is divided by the divisor operand 
and the quotient operand is replaced by the result. 


Notes: 


l. Division is performed such that the remainder (unless it is 
zero and which is lost) has the same sign as the dividend, 
i.e., the result is truncated towards @. 


2. Integer overflow occurs if and only if the largest negative 
integer is divided by -l. On overflow, operands are affected 
as in 3 below. 
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3. If the divisor operand is @, then in 2 operand format’ the 
quotient operand is not affected; in 3 operand format the 
quotient operand is replaced by the dividend operand. 
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EDIV Extended Divide 
Format: 

opcode divr.rl, divd.rg, quo.wl, rem.wl 
Operation: 


quo <- divd / divr; 
rem <- REM(divd, divr); 


Condition Codes: 
N <- quo LSS @; 
Z <- quo EQL @; 
V <- {integer overflow} OR {divr EQL 6}; 
C <- @; 


Exceptions: 


integer overflow 
divide by zero 


Opcodes: 
7B EDIV Extended Divide 
Description: 
The dividend operand is divided by the divisor operand; the quotient 


operand is replaced by the quotient and the remainder operand is replace 
by the remainder. 


Notes: 


1. The division is performed such that the remainder operand 
(unless it is @) has the same sign as the dividend operand. 


2. On overflow, the operands are affected as in 3. below. 
3. If the divisor operand is @, then the quotient operand is 


replaced by bits 31:8 of the dividend operand, and _ the 
remainder operand is replaced by @. 
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EMUL Extended Multiply 
Format: 

opcode mulr.rl, muld.rl, add.rl, prod.wq 
Operation: 

prod <- {muld * mulr} + SEXT (add) ; 
Condition Codes: 


N <- prod LSS @; 


Z <- prod EQL @; 
V <- @; 
C <—- 6; 


Exceptions: 
none 
Opcodes: 


7A EMUL Extended Multiply 


Description: 


The multiplicand operand is multiplied by the multiplier operand giving 
a double length result. The addend operand is sign-extended to double 
length and added to the result. The product operand is replaced by the 
final result. 


Instructions 12-Feb-82 -- Rev 7 
INTEGER ARITHMETIC AND LOGICAL INSTRUCTIONS 


INC Increment 
Format: 

opcode sum.mx 
Operation: 

sum <- sum + 1]; 
Condition Codes: 

N <- sum LSS @; 

Z <- sum EQL @; 

V <- {integer overflow}; 

C <- {carry from most significant bit}; 
Exceptions: 

integer overflow 
Opcodes: 

96 INCB Increment Byte 


BO6é INCW Increment Word 
D6 INCL Increment Long 


Description: 


Page 


One is added to the sum operand and the sum operand is replaced by 


result. 


Notes: 


1. Arithmetic overflow occurs if the largest positive integer 


the 


is 


incremented. On overflow, the sum operand is replaced by the 


largest negative integer. 


2. INCx sum is equivalent to ADDx S“#1, sum, but is 
shorter. 


1 


byte 
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MCOM Move Complemented 
Format: 

opcode src.rx, dst.wx 
Operation: 

dst <- NOT src; 
Condition Codes: 


N <- dst LSS @; 


Z <- dst EQL @; 
V <- @; 
C <- C; 


Exceptions: 
none 
Opcodes: 
92 MCOMB Move Complemented Byte 
B2 MCOMW Move Complemented Word 
D2 MCOML Move Complemented Long 
Description: 


The destination operand is replaced by the ones complement of the source 
operand. 
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MNEG Move Negated 
Format: 

opcode src.rx, dst.wx 
Operation: 

dst <- -src; 
Condition Codes: 
<- dst LSS @; 
<- dst EQL @; 


<- {integer overflow}; 
<- dst NEO @Q; 


ASIN Z 


Exceptions: 


integer overflow 


Opcodes: 
8E MNEGB Move Negated Byte 
AE MNEGW Move Negated Word 
CE MNEGL Move Negated Long 


Description: 


The destination operand is replaced by the negative of the source 
operand. 


Notes: 


Integer overflow occurs if the source operand is the largest negative 
integer (which haS no positive counterpart). On overflow, the 
destination operand is replaced by the source operand. 
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MOV Move 
Format: 

opcode src.rx, dst.wx 
Operation: 

dst <- src; 
Condition Codes: 


N <- dst LSS @; 


Z <- dst EQL @; 
V <- @; 
Cg iCs 


Exceptions: 


none 
Opcodes: 
99 MOVB Move Byte 
B@ MOVW Move Word 
Dd MOVL Move Long 


7D MOVQ Move Quad 
7DFD MOVO Move Octa 


Description: 


The destination operand is replaced by the source operand. 
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MOVZ Move Zero-Extended 
Format: 

opcode src.rx, dst.wy 
Operation: 

dst <- ZEXT (src); 


Condition Codes: 


N <- @; 
Z <- dst EQL @; 
V <- @; 
C <= C3 


Exceptions: 


none 
Opcodes: 
9B MOVZBW Move Zero-Extended Byte to Word 
9A MOVZBL Move Zero-Extended Byte to Long 
3C MOVZWL Move Zero-Extended Word to Long 
Description: 


For MOVZBW, bits 7:8 of the destination operand are replaced by the 
source operand; bits 15:8 are replaced by zero. For MOVZBL, bits 7:9 
of the destination operand are replaced by the source operand; bits 
31:8 are replaced by 4@. For MOVZWL, bits 15:8 of the destination 
operand are replaced by the source operand; bits 31:16 are replaced by 
0. 
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MUL Multiply 

Format: 
opcode mulr.rx, prod.mx 2 operand 
opcode mulr.rx, muld.rx, prod.wx 3 operand 


Operation: 
prod <- prod * mulr; !2 operand 
prod <- muld * mulr; !3 operand 


Condition Codes: 


N <- prod LSS @; 

Z <- prod EQL @; 

V <- {integer overflow}; 
C <- @; 


Exceptions: 


integer overflow 


Opcodes: 
84 MULB2 Multiply Byte 2 Operand 
85 MULB3 Multiply Byte 3 Operand 
A4 MULW2 Multiply Word 2 Operand 
A5 MULW3 Multiply Word 3 Operand 
C4 MULL2 Multiply Long 2 Operand 
C5 MULL3 Multiply Long 3 Operand 


Description: 


In 2 operand format, the product operand is multiplied by the multiplier 
operand and the product operand is’~ replaced by the low half of the 
Gouble length result. In 3 operand format, the multiplicand operand is 
multiplied by the multiplier operand and the product operand is replaced 
by the low half of the double length result. 


Notes: 


Integer overflow occurs if the high half of the double length result is 
not equal to the Sign extension of the low half. 
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PUSHL Push Long 
Format: 

opcode src.rl 
Operation: 

-(SP) <- sre; 
Condition Codes: 


N <- sre LSS @; 


Z <- sre EQL @; 
V <- @; 
C <- C; 


Exceptions: 
none 
Opcodes: 


DD PUSHL Push Long 


Description: 
The longword source operand is pushed on the 


Notes: 


PUSHL is equivalent to MOVL src, -(SP), but is 1 byte shorter. 


stack. 


Page 4-31 


Instructions 12-Feb-82 -- Rev 7 Page 4-32 
INTEGER ARITHMETIC AND LOGICAL INSTRUCTIONS 


ROTL Rotate Long 


Format: 


opcode cnt.rb, src.rl, dst.wl 


Operation 


dst <- sre rotated cnt bits; 


Condition 
N 


Z 
V 
C 


Codes: 

<- dst LSS @Q; 
<- dst EQL @; 
<- @; 

C=C 


Exceptions: 


none 


Opcodes: 


9C ROTL Rotate Long 


Descripti 


The sourc 
by the 
result. 
rotates 
9 count 
operand. 


on: 


e operand is rotated logically by the number of bits’ specified 
count operand and the destination operand is replaced by the 
The source operand is unaffected. A positive count’ operand 
to the left. A negative count operand rotates to the right. A 
operand replaces the destination operand with the source 


Instructi 
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S 
Format: 

fo) 
Operation 


d 


BWC Subtract With Carry 


pcode sub.rl, dif.ml 


1f <- dif - sub - C; 


Condition Codes: 


N 


<- dif LSS @; 
<- dif EQL @; 


Z 
V <- {integer overflow}; 
C 


<- {borrow into most significant bit}; 


Exceptions: 


1 
Opcodes: 


D9 S 


Descripti 
The subtr 
subtracte 
replaced 


Notes: 


2 


Ze 


nteger overflow 


BWC Subtract With Carry 


ons 


ahend operand and the contents of the condition code C bit are 
qd from the difference operand and the difference operand is 
by the result. 


On overflow, the difference operand is replaced by the _ low 
order bits of the true result. 


The 2 subtractions in the operation are performed 
simultaneously. 
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SUB Subtract 
Format: 

opcode sub.rx, dif.mx 2 operand 

opcode sub.rx, min.rx, dif.wx 3 operand 
Operation: 

dif <- dif - sub; !2 operand 

dif <- min - sub; !3 operand 
Condition Codes: 

N <- dif LSS @; 

Z <- dif EQL @; 

V <- {integer overflow}; 

C 


<- {borrow into most significant bit}; 


Exceptions: 


integer overflow 


Opcodes: 
82 SUBB2 Subtract Byte 2 Operand 
83 SUBB3 Subtract Byte 3 Operand 
A2 SUBW2 Subtract Word 2 Operand 
A3 SUBW3 Subtract Word 3 Operand 
C2 SUBL2 Subtract Long 2 Operand 
C3 SUBL3 Subtract Long 3 Operand 


Description: 


In 2 operand format, the subtrahend operand is subtracted from _ the 
difference operand and the difference operand is replaced by the result. 
In 3 operand format, the subtrahend operand is subtracted from the 
minuend operand and the difference operand is replaced by the result. 


Notes: 


Integer overflow occurs if the input operands to the subtract are of 
different signs and the sign of the result is the sign of the 
subtrahend. On overflow, the difference operand is replaced by the low 
order bits of the true result. 
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TST Test 
Format: 

opcode src.rx 
Operation: 

src —- @; 
Condition Codes: 


N <- sre LSS @; 


Z <- sre EQL @; 
V <- @; 
C <- @; 


Exceptions: 


none 
Opcodes: 
95 TSTB Test Byte 
B5 TSTW Test Word 
D5 TSTL Test Long 


Description: 


The condition codes are affected according to the value of the source 
operand. 


Notes: 


TSTx sre is equivalent to CMPx src, S°#8, but is 1 byte shorter. 


Instructions 


XOR 
Format: 

opcode 

opcode 
Operation: 

dst <- 


dst <- 
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Exclusive OR 


mask.rx, 


mask.rx, 


dst XOR mask; 


src XOR mask; 


Condition Codes: 


N <- dst LSS @; 
<- dst EQL @; 


Z 
V <- @;3 
C <- C; 


Exceptions: 


none 

Opcodes: 
8C XORB2 
8D XORB3 
AC XORW 2 
AD XORW3 
Cc XORL2 
CD XORL3 

Description: 


In 2 operand format, 
operand and_ the 


operand format, 


Exclusive 
Exclusive 
Exclusive 
Exclusive 
Exclusive 
Exclusive 


dst. 


Src. 


OR 
OR 
OR 
OR 
OR 
OR 


MX 


YX, 


Byte 
Byte 
Word 
Word 
Long 
Long 


2 operand 


dst.wx 3 operand 


12 


operand 


!3 operand 


WN WN W 


Operand 
Operand 
Operand 
Operand 
Operand 
Operand 


the mask operand is  XORed 
destination 
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destination 
operand is replaced by the result. In 3 
the mask operand is XORed with the 
the destination operand is replaced by the result. 


operand and 
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4.3 ADDRESS INSTRUCTIONS 


The Following instructions are described in this section. 


Instructions 
l. Move Address 5 
MOVA{B ,W,L=F ,Q=D=G,O=H} src.ax, dst.wl 
2. Push Address 5 
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MOVA Move Address 
Format: 

opcode src.ax, dst.wl 
Operation: 

dst <- src; 
Condition Codes: 


N <- dst LSS @Q; 


Z <- dst EQL @; 
V <- @; 
C <= C; 


Exceptions: 


none 
Opcodes: 
9E MOVAB Move Address Byte 
3E MOVAW Move Address Word 
DE MOVAL, Move Address Long 
MOVAF Move Address F floating 
7E MOVAQ, Move Address Quad 


MOVAD, Move Address D_ floating 
MOVAG Move Address G floating 

7EFD MOVAH Move Address H_ floating, 
MOVAO Move Address Octa 


Description: 


The destination operand is replaced by the source operand. The context 
in which the source operand is evaluated is given by the data type of 
the instruction. The operand whose address replaces the destination 
operand is not referenced. 


Notes: 


The source operand is of address access type which causes the address of 
the specified operand to be moved. 
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PUSHA Push Address 
Format: 

opcode src.ax 
Operation: 

-(SP) <= src; 
Condition Codes: 


N <- sre LSS @; 


Z <~- sre EQL @; 
V <- @; 
C <- C; 


Exceptions: 


none 
Opcodes: 
oF PUSHAB Push Address Byte 
3F PUSHAW Push Address Word 
DF PUSHAL, Push Address Long 
PUSHAF Push Address F_ floating 
7F PUSHAQ, Push Address Quad 


PUSHAD, Push Address D_ floating 
PUSHAG Push Address G floating 

7FFD PUSHAH Push Address H_ floating, 
PUSHAO Push Address Octa 


Description: 

The source operand is pushed on the stack. The context in which the 
source operand iS evaluated iS given by the data type of the 
instruction. The operand whose address is pushed is not referenced. 


Notes: 


1. PUSHAx src is equivalent to MOVAx src, -(SP), but is 1 byte 
Shorter. 


2. The source operand is of address access type which causes’- the 
address of the specified operand to be pushed. 
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4.4 VARIABLE LENGTH BIT FIELD INSTRUCTIONS 


A variable length bit field is specified by 3 operands: 


a 


3% 


In order 


A longword position operand. 


A byte field size operand which must be in the range @ through 
32 or a reserved operand fault occurs. 


A base address (relative to which the position is used _ to 
locate the bit field). The address is obtained from an operand 
of address access type. However, unlike other instances’ of 
operand specifiers of address access type, register mode may be 
designated in the operand specifier. In this case the field is 
contained in the register n deSignated by the operand specifier 
(or register n+l concatenated with register n). (See Chapter 
2) If the field is contained in a register and size is not 
zero, the poSition operand must have a value in the range @ 
through 31 or a reserved operand fault occurs. 


to simplify the description of the variable bit field 


instructions, a macro FIELD(pos, size, address) is introduced with the 
following expansion (if size NEQ @Q@): 


FIELD(pos, size, address) 


(address + SEXT(pos<31:3>))<{size - 1} + pos<2:0>:pos<2:0>> 


!if address not specified by register mode 


{R[nt+l]'Rn}<{size - 1} + pos:pos> 


!if address specified by register mode and pos + size 
IGTRU 32 


Rn<{size - 1} + pos:pos> 


!if address specified by register mode and pos + size 
ILEQU 32 


The number of bytes referenced by the contents ( ) operator 
above is: 


1+ {{{size - 1} + pos<2:0>} / 8} 


Zero bytes are referenced if the field size is @. 
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The following instructions are described in this section. 
Instructions 


1. Compare Field 1 
CMPV pos.rl, Size.rb, base.vb, {field.rv}, src.rl 


2. Compare Zero-Extended Field 1 
CMPZV pos.rl, size.rb, base.vb, {field.rv}, sre.rl 


3. Extract Field 1 
EXTV pos.rl, size.rb, base.vb, {field.rv}, dst.wl 


4. Extract Zero-Extended Field 1 
EXTZV pos.rl, size.rb, base.vb, {field.rv}, dst.wl 


5. Find First 2 
FF{S,C} startpos.rl, size.rb, base.vb, {field.rv}, findpos.wl 


6. Insert Field 1 
INSV src.rl, pos.rl, size.rb, base.vb, {field.wv} 


The following variable bit field instructions are described in the 
section on Control Instructions. 


1. Branch on Bit 2 
BB{S,C} pos.rl, base.vb, displ.bb, {field.rv} 


2. Branch on Bit (and modify without interlock) 4 
BB{S,C}{S,C} pos.rl, base.vb, displ.bb, {field.mv} 


3. Branch on Bit (and modify) Interlocked 2 
BB{SS,CC}I pos.rl, base.vb, displ.bb, {field.mv} 


Instructions 
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CMP Compare Field 
Format: 
opcode pos.rl, 


Operation: 


size.rb, base.vb, 


tmp <- if size NEQU @ then SEXT(FIELD (pos, 


size, 
tmp - src; 


base)) else @; 


tmp <- if size NEQU 9 then ZEXT(FIELD (pos, 


size, 
tmp - src; 


base)) else @; 


Condition Codes: 
N <- tmp LSS src; 
Z <- tmp EQL src; 
V <- 0; 
C <- tmp LSSU src; 


Exceptions: 


reserved operand 
Opcodes: 
EC CMPV Compare Field 
ED CMPZV Compare Zero-Extended 


Description: 


The field specified by the position, 
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srce.rl 
'CMPV 
'CMPZV 
Field 
Size and base operands iS compared 


the source operand is compared with 


For CMPZV, the source operand iS compared with 
The only action is to affect the condition 


with the source operand. For CMPV, 
the sign extended field. 
the zero extended field. 
codes. 
Notes: 
1. A reserved operand fault occurs if: 
1. size GTRU 32. 
2. pos GTRU 31, size NEQ @, 


registers. 


and the field is contained in the 
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2. On a reserved operand fault, the condition codes are 
UNPREDICTABLE. 
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EXT Extract Field 
Format: 

opcode pos.rl, size.rb, base.vb, dst.wl 
Operation: 


dst <- if size NEQU @ then SEXT(FIELD(pos, size, base) ) 
else @; IEXTV 


dst <- if size NEQU @ then ZEXT(FIELD(pos, size, base) ) 
else @; IEXTZV 


Condition Codes: 


N <- dst LSS @; 


Z <- dst EQL @; 
V <- @; 
C <- C; 


Exceptions: 


reserved operand 


Opcodes: 
EE EXTV Extract Field 
EF EXTZV Extract Zero-Extended Field 


Description: 


For EXTV, the destination operand is replaced by the sign extended field 
specified by the position, size, and base operands. For EXTZV, the 
destination operand is replaced by the zero extended field specified by 
the poSition, size and base operands. If the size operand is 9, the 
only action is to replace the destination operand with @ and affect the 


condition codes. 
Notes: 
1. A reserved operand fault occurs if: 
1. size GTRU 32. 
2. pos GTRU 31, size NEQ @, and the field is contained in the 


registers. 


2. On a reserved operand fault, the destination operand is 
unaffected and the condition codes are UNPREDICTABLE. 
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FF Find First 
Format: 

opcode startpos.rl, size.rb, base.vb, findpos.wl 
Operation: 


State = if {FFS} then 1 else @; 
if size NEQU @ then 


begin 
tmpl <- FIELD(startpos, size, base); 
tmp2 <- @; 


while {tmpl<tmp2> NEQ state} AND 
{tmp2 LEQU {size - 1}} do 
tmp2 <- tmp2 + 1; 
findpos <- startpos + tmp2; 
end 
else 
findpos <- startpos; 


Condition Codes: 


N <- @; 
Z <- {bit not found}; 
V <- @; 
C <- @;3 


Exceptions: 


reserved operand 


Opcodes: 
EB FFC Find First Clear 
EA FFS Find First Set 


Description: 


A field specified by the start position, size, and base operands is 
extracted. The field is tested for a bit in the state indicated by the 
instruction starting at bit @ and extending to the highest bit in the 
field. If a bit in the indicated state is found, the find position 
operand is replaced by the position of the bit and the Z condition code 
bit is cleared. If no bit in the indicated state is found, the find 
position operand is replaced by the position (relative to the base) of a 
bit one position to the left of the specified field, and the Z condition 
code bit is set. If the size operand is @, the find position operand is 
replaced by the start position operand and the Z condition code bit is 
set. 
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Notes: 


5 he 


A reserved operand fault occurs if: 


1. size GTRU 32. 


2. startpos GTRU 31, size NEQ @, and the field is contained in 
the registers. 


On a reserved operand fault, the find position operand is 
unaffected and the condition codes are UNPREDICTABLE. 
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INSV Insert Field 


Format: 


opcode src.rl, pos.rl, size.rb, base.vb 


Operation 


i 


Condition 
N 
Z 
V 
C 
Exception 


r 


Opcodes: 


f size NEQU 9 then FIELD(pos, size, base) <- 
srce<{size - 1}:@>; 


Codes: 


S° 


eserved operand 


FQ INSV Insert Field 


Descripti 


on: 


The field specified by the position, size, and base operands is replaced 
Ssize-1:0 of the source operand. If the size operand is @, the 


by bits 
only acti 


Notes: 


1. 


on is to affect the condition codes. 


A reserved operand fault occurs if: 
1. size GTRU 32. 
2. pos GTRU 31, size NEQ @, and the field is contained in 


registers. 


On a reserved operand fault, the field is unaffected and 
condition codes are UNPREDICTABLF. 


the 


the 
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4.5 CONTROL INSTRUCTIONS 


In most implementations of the VAX-11 architecture, improved execution 
speed will result if the target of a control instruction is on an 
aligned longword boundary. 


The following instructions are described in this section. 
Instructions 


1. Add Compare and Branch 7 
ACB{B,W,L,F,D,G,H} limit.rx, add.rx, index.mx, displ.bw 
Compare is LE on poSitive add, GE on negative 


add. 
2. Add One and Branch Less Than or Equal 1 
AOBLEQ limit.rl, index.ml, displ.bb 
3. Add One and Branch Less Than 1 
AOBLSS limit.rl, index.ml, displ.bb 
4. Conditional Branch 12 
B{condition} displ.bb 
Condition Name 
LSS Less Than 
LEQ Less Than or Equal 
EQL, EQLU Equal, Equal Unsigned 
NEQ, NEQU Not Equal, Not Equal Unsigned 
GEQ Greater Than or Equal 
GTR Greater Than 
LSSU, CS Less Than Unsigned, Carry Set 
LEQU Less Than or Equal Unsigned 
GEQU, CC Greater Than or Equal Unsigned, 
Carry Clear 
GTRU Greater Than Unsigned 
VS Overflow Set 
VC Overflow Clear 
5. Branch on Bit 2 


BB{S,C} pos.rl, base.vb, displ.bb, {field.rv} 


6. Branch on Bit (and modify without interlock) 4 
BB{S,C}{S,C} pos.rl, base.vb, displ.bb, {field.mv} 


7. Branch on Bit (and modify) Interlocked 2 
BB{SS,CC}I pos.rl, base.vb, displ.bb, {field.mv} 


8. Branch on Low Bit 2 
BLB{S,C} src.rl, displ.bb 
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9. Branch With {Byte, Word} Displacement 2 
BR{B,W} displ.bx 


16. Branch to Subroutine With {Byte, Word} Displacement 2 
BSB{B,W} displ.bx, {-(SP).wl} 


ll. Case 3 
CASE{B,W,L} selector.rx, base.rx, limit.rx, displ.bw-list 


12. Jump 1 
JMP dst.ab 


13. Jump to Subroutine 1 
JSB dst.ab, {-(SP).wl} 


14. Return from Subroutine 1 
RSB {(SP)+.r1} 


15. Subtract One and Branch Greater Than or Equal 1 
SOBGEQ index.ml, displ.bb 


16. Subtract One and Branch Greater Than ] 
SOBGTR index.ml, displ.bb 
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ACB Add Compare and Branch 
Format: 

opcode limit.rx, add.rx, index.mx, displ.bw 
Operation: 


index <- index + add; 

if {{add GEQ 6} AND {index LEQ limit}} OR 
{{add LSS @} AND {index GEQ limit}} then 
PC <- PC + SEXT(displ); 


Condition Codes: 


N <- index LSS @; 

Z <- index EQL @; 

V <- {integer or floating overflow}; 
C <- C; 


Exceptions: 


integer overflow 
floating overflow 
floating underflow 
reserved operand 


Opcodes: 
9D ACBB Add Compare and Branch Byte 
3D ACBW Add Compare and Branch Word 
Fl ACBL Add Compare and Branch Long 
4F ACBF Add Compare and Branch F_ floating 
oF ACBD Add Compare and Branch D floating 
4FFD ACBG Add Compare and Branch G floating 
6FFD ACBH Add Compare and Branch H_ floating 


Description: 


The addend operand is added to the index operand and the index operand 
is replaced by the result. The index operand is compared with the limit 
operand. If the addend operand is positive (or @) and the comparison is 
less than or equal or if the addend is negative and the comparison is 
greater than or equal, the sign-extended branch displacement is added to 
PC and PC is replaced by the result. 
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Notes: 


l. 


ACB efficiently implements the general FOR or DO loops in high 
level languages since the sense of the comparison between index 
and limit is dependent on the sign of the addend. 


On integer overflow, the index operand is replaced by the low 
order bits of the true result. Comparison and _ branch 
determination proceed normally on the updated index operand. 


On floating underflow, if FU is clear, the index operand is 
replaced by 9@ and comparison and branch determination proceed 
normally. A fault occurs if FU is set and the index operand is 
unaffected. 


On floating overflow, the instruction takes a floating overflow 
fault and the index operand is unaffected. 


On a reserved operand fault, the index operand is’ unaffected 
and the condition codes are UNPREDICTABLE. 


Except for 5. above, the C-bit is unaffected. 
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AOBLEQ Add One and Branch Less Than or Equal 
Format: 

opcode limit.rl, index.ml, displ.bb 
Operation: 

index <- index + 1]; 

if index LEQ limit then PC <- 

PC + SEXT (displ); 

Condition Codes: 

N <- index LSS @; 

Z <- index EQL @; 

V <- {integer overflow}; 

C <= C; 
Exceptions: 

integer overflow 


Opcodes: 


F3 AOBLEQ Add One and Branch Less Than or Equal 


Description: 


One is added to the index operand and the index operand is replaced by 
the result. The index operand is compared with the limit operand. If 
it is less than or equal, the sign-extended branch displacement is added 
to PC and PC is replaced by the result. 


Notes: 


1. Integer overflow occurs if the index operand before addition is 
the largest positive integer. On overflow, the index operand 
is replaced by the largest negative integer, and the branch is 
taken. 


2. The C-bit is unaffected. 
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AOBLSS Add One and Branch Less Than 
Format: 
opcode limit.rl, index.ml, displ.bb 
Operation: 
index <- index + 1; 
if index LSS limit then PC <- 
PC + SEXT (displ); 


Condition Codes: 


N <- index LSS @; 

Z <- index EQL @; 

V <- {integer overflow}; 
C <= C; 


Exceptions: 
integer overflow 
Opcodes: 


F2 AOBLSS Add One and Branch Less Than 


Description: 


One is added to the index operand and the index operand is replaced by 
the result. The index operand is compared with the limit operand. If 
it is less than, the sign-extended branch displacement is added to’ the 
PC and PC is replaced by the result. 


Notes: 


1. Integer overflow occurs if the index operand before addition is 
the largest positive integer. On overflow, the index operand 
is replaced by the largest negative integer, and thus’ (unless 
the limit operand is the largest negative integer) the branch 
is taken. 


2. The C-bit is unaffected. 
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Format: 


opcode displ.bb 


Operation: 
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Branch on (condition) 


if condition then PC <- PC + SEXT (displ); 


Condition Cod 


N <- 
Z<- 
V<- 
C <= 


Exceptions: 


Opcodes: 


14 


15 


12 


13 
18 


1F 


none 


es: 


N; 


Condition 


{N OR 
{N OR 
Z EQL 
Z EQL 
N EQL 


N EOL 
{C OR 


{C OR 
V EQL 


V EQL 
C EQL 


C EQL 


Description: 


The condition codes are tested and if the 


instruction 


Z} 
Z} 


0 


is 


EQL @ 


EQL 1 


EQL @ 


EQL l 


met, 


BGTR 
BLEQ 


BNEQ, 
BNEQU 
BEQL, 
BEQLU 
BGEQ 


BLSS 
BGTRU 


BLEQU 


BVC 
BVS 


BGEQU, 


BCC 


BLSSU, 


BCS 


Branch on Greater Than 
(Signed) 

Branch on Less Than or Equal 
(signed) 

Branch on Not Equal (signed) 
Branch on Not Equal Unsigned 
Branch on Equal (Signed) 
Branch on Equal Unsigned 
Branch on Greater Than or 
Equal (signed) 

Branch on Less Than (Signed) 
Branch on Greater Than 
Unsigned 

Branch Less Than or Equal 
Unsigned 

Branch on Overflow Clear 
Branch on Overflow Set 
Branch on Greater Than or 
Equal Unsigned 

Branch on Carry Clear 

Branch on Less Than Unsigned 
Branch on Carry Set 


condition indicated by 
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the 


the sign-extended branch displacement is added to 
the PC and PC is replaced by the result. 
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Notes: 

The VAX-11 conditional branch instructions permit considerable 
Flexibility in branching but require care in choosing the correct branch 
instruction. The conditional branch instructions are best seen as 3 


overlapping groups: 


l. Overflow and Carry Group 


BVS V EQL l 
BVC V EQL 9 
BCS C EQL l 
BCC C EQL @ 


These instructions are typically used to check for overflow 
(when overflow traps are not enabled), for multiprecision 
arithmetic, and for other special purposes. 


2. Unsigned Group 


BLSSU C EQL l 
BLEQU {C OR Z} EQL 1 
BEQLU Z EQL 1 
BNEQU Z EQL @ 
BGE QU C EQL @ 
BGTRU {C OR Z} EQL @ 


These instructions typically follow integer and field 
instructions where the operands are treated as_ unsigned 


integers, address instructions, and character string 
instructions. 


3. Signed Group 


BLSS N EQL 1 
BLEQ {N OR Z} EQL 1 
BEQL Z EQL 1 
BNEQ Z EQL @ 
BGEQ N EQL @ 
BGTR {N OR Z} EQL @ 


These instructions typically follow integer and field 
instructions where the operands’ are being treated as signed 
integers, floating point instructions, and decimal string 
instructions. 
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BB Branch on Bit 
Format: 
opcode pos.rl, base.vb, displ.bb 
Operation: 
teststate = if {BBS} then 1 else @; 
if FIELD(pos, 1, base) EQL teststate then 
PC <- PC + SEXT(displ); 


Condition Codes: 


N <- N;3 
Z. <= 25 
V <- V;3 
C <= C; 


Exceptions: 


reserved operand 


Opcodes: 
E@ BBS Branch on Bit Set 
El BBC Branch on Bit Clear 


Description: 

The single bit field specified by the position and base operands is 
tested. If it is in the test state indicated by the instruction, the 
sign-extended branch displacement is added to PC and PC is’ replaced by 
the result. 

Notes: 


1. See Section 4.5 for definition of FIELD. 


2. A reserved operand fault occurs if pos GTRU 31 and the bit is 
contained in a register. 


3. On a reserved operand fault, the condition codes are 
UNPREDICTABLE. 


Instructions 12-Feb-82 -- Rev 7 Page 4-57 


CONTROL INSTRUCTIONS 


BB Branch on Bit (and modify without interlock) 
Format: 

opcode pos.rl, base.vb, displ.bb 
Operation: 

teststate = if {BBSS or BBSC} then 1 else @; 

newstate = if {BBSS or BBCS} then 1 else @; 

tmp <- FIELD(pos, 1, base); 

FIELD(pos, 1, base) <- newState; 

if tmp EQL teststate then 

PC <- PC + SEXT(displ); 


Condition Codes: 


N <- N;> 
Z <-> Z: 
V <- V; 
C <- C; 


Exceptions: 


reserved operand 


Opcodes: 
E2 BBSS Branch on Bit Set and Set 
E3 BBCS Branch on Bit Clear and Set 
E4 BBSC Branch on Bit Set and Clear 
E5 BBCC Branch on Bit Clear and Clear 


Description: 


The single bit field specified by the position and base operands 


tested. If it is in the test state indicated by the instruction, 
Sign-extended branch displacement is added to PC and PC is'7 replaced 
the result. Regardless of whether the branch is taken or not, 


tested bit is put in the new state as indicated by the instruction. 
Notes: 
1. See Section 4.5 for definition of FIELD. 


2. A reserved operand fault occurs if pos GTRU 31 and the bit 
contained in a register. 


3. On a reserved operand fault, the field is unaffected and 
condition codes are UNPREDICTABLE. 


is 
the 


by 
the 


is 


the 
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4. The modification of the bit is not an interlocked operation. 
See BBSSI and BBCCI for interlocking instructions. 
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BB Branch on Bit Interlocked 
Format: 

opcode pos.rl, base.vb, displ.bb 
Operation: 


teststate = if {BBSSI} then 1 else @; 
newstate = teststate; 
{set interlock}; 
tmp <- FIELD(pos, 1, base); 
FIELD(pos, 1, base) <- newstate; 
{release interlock}; 
if tmp EQL teststate then 

PC <- PC + SEXT(displ); 


Condition Codes: 


N <- N;3 
Z<- Z3 
V <- V;3 
C <- C; 


Exceptions: 


reserved operand 


Opcodes: 
E6 BBSSI Branch on Bit Set and Set Interlocked 
E7 BBCCI Branch on Bit Clear and Clear Interlocked 


Description: 


The single bit field specified by the position and base operands is 
tested. If it is in the test state indicated by the instruction, the 
sign-extended branch displacement is added to the PC and PC is’ replaced 
by the result. Regardless of whether the branch is effected or not, the 
tested bit is put in the new state as indicated by the instruction. i 
the bit is contained in memory, the reading of the state of the bit and 
the setting of it to the new state is an interlocked operation. No 
other processor or I/0 device can do an interlocked access on the bit 
during the interlocked operation. 


Notes: 
l. See Section 4.5 for definition of FIELD 


2. A reserved operand fault occurs if pos GTRU 31 and the bit is 
contained in registers. 
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3 


On a reserved operand fault, the field is unaffected and the 
condition codes are UNPREDICTABLE. 


Except for memory interlocking BBSSI is equivalent to BBSS_ and 
BBCCI is equivalent to BBCC. 


This instruction is designed to modify interlocks with other 
processors or devices. For example, to implement "busy 
waiting": 


1S: BBSSI bit,base,1$ 
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BLB Branch on Low Bit 
Format: 
opcode src.rl, displ.bb 
Operation: 
teststate = if {BLBS} then 1 else @; 
if src<@> EQL teststate then 
PC <- PC + SEXT (displ); 


Condition Codes: 


N <- N; 
Z <- Z3 
V <- V;3 
C <- C; 


Exceptions: 


none 
Opcodes: 
E8 BLBS Branch on Low Bit Set 
E9 BLBC Branch on Low Bit Clear 


Description: 


The low bit (bit @) of the Source operand is tested and if it is equal 
to the test state indicated by the instruction, the sign-extended branch 
displacement is added to PC and PC is replaced by the result. 
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BR Branch 
Format: 

opcode displ.bx 
Operation: 

PC <- PC + SEXT (displ); 
Condition Codes: 

N <- N 
Z<- Z 
V <- V 
C <-C 


me ™Oe eo BO 


Exceptions: 


none 

Opcodes: 
1l BRB Branch With Byte Displacement 
31 BRW Branch With Word Displacement 


Description: 


The Sign-extended branch displacement is added to PC and PC is'7 replaced 
by the result. 
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BSB Branch To Subroutine 
Format: 

opcode displ.bx 
Operation: 


-(SP) <- PC; 
PC <- PC + SEXT(displ); 


Condition Codes: 


N <- N3 
Z<- Z3 
V <- V;3 
C <=- C; 
Exceptions: 
none 
Opcodes: 
10 BSBB Branch to Subroutine With Byte Displacement 
30 BSBW Branch to Subroutine With Word Displacement 


Description: 


PC is pushed on the stack as a _e longword. The sign-extended branch 
displacement is added to PC and PC is replaced by the result. 
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CASE Case 
Format: 


opcode selector.rx, base.rx, limit.rx, 
disp1(G@].bw,..., displ{limit] .bw 


Operation: 


tmp <- selector - base; 
PC <- PC + if tmp LEQU limit then 
SEXT(displ[{tmp]) else {2 + 2 * ZEXT (limit) }; 


Condition Codes: 
N <- tmp LSS limit; 
Z <- tmp EQL limit; 
V <- QO; 
C <- tmp LSSU limit; 


Exceptions: 


none 

Opcodes: 
SF CASEB Case Byte 
AF CASEW Case Word 
CF CASEL Case Long 


Description: 


The base operand is subtracted from the selector operand and a temporary 
is replaced by the result. The temporary is compared with the limit 
operand and if it is less than or equal unSigned, a branch displacement 
selected by the temporary value is added to PC and PC is replaced by the 
result. Otherwise, 2 times the sum of the limit operand and 1 is added 
to PC and PC is replaced by the result. This causes PC to be moved past 
the array of branch displacements. Regardless of the branch taken, the 
condition codes are affected by the comparison of the temporary operand 
with the limit operand. 


Notes: 
1. After operand evaluation, PC is pointing at displ[@], not’ the 
next instruction. The branch displacements are relative to the 
address of displ[@]. 


2. The selector and base operands can both be considered either as 
Signed or unSigned integers. 
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JMP Jump 
Format: 

opcode dst.ab 
Operation: 

PC <- dst; 


Condition Codes: 


N <- N; 
Z<~- Z3 
V <- V; 
C <= C; 


Exceptions: 
none 
Opcodes: 


17 JMP Jump 


Description: 


PC is replaced by the destination operand. 
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JSB Jump to Subroutine 
Format: 

opcode dst.ab 
Operation: 


-(SP) <- PC; 
PC <- dst; 


Condition Codes: 


N <- 
Z<- Z 
V<- V 
Cc. <= 


me BOE Me BWEO 


Exceptions: 
none 
Opcodes: 


16 JSB Jump to Subroutine 


Description: 


PC is pushed on the stack as a_ longword. PC is replaced by the 
destination operand. 


Notes: 


Since the operand specifier conventions cause the evaluation of the 
destination operand before saving PC, JSB can be used for coroutine 
calls with the stack used for linkage. The form of such a call is JSB 
@(SP)+. 
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RSB Return from Subroutine 
Format: 

opcode 
Operation: 

PC <- (SP)+; 


Condition Codes: 


N <- N;3 
Z <-> Z3 
V <- V3 
C <= C; 


Exceptions: 
none 
Opcodes: 


@5 RSB Return From Subroutine 


Description: 
PC is replaced by a longword popped from the stack. 
Notes: 


1. RSB is used to return from subroutines called by the BSBB, BSBW 
and JSB instructions. 


2. RSB is equivalent to JMP @(SP)+, but is 1 byte shorter. 
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SOBGEQ Subtract One and Branch Greater Than or Equal 
Format: 

opcode index.ml, displ.bb 
Operation: 

index <- index - 1]; 

if index GEQ @ then PC <- 

PC + SEXT (displ); 

Condition Codes: 

N <- index LSS @; 

Z <- index EQL @; 

V <- {integer overflow}; 

C <- C; 
Exceptions: 

integer overflow 


Opcodes: 


F4 SOBGEQ, Subtract One and Branch Greater Than or Equal 


Description: 


One is subtracted from the index operand and the index operand is 
replaced by the result. If the index operand is greater than or equal 


to 8, the sign-extended branch displacement is added to PC and PC is 
replaced by the result. 


Notes: 


1. Integer overflow occurs if the index operand before subtraction 
is the largest negative integer. On overflow, the index 
operand is replaced by the largest positive integer, and thus 
the branch is taken. 


2. The C-bit is unaffected. 
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SOBGTR Subtract One and Branch Greater Than 
Format: 

opcode index.ml, displ.bb 
Operation: 

index <- index - 1]; 

if index GTR @ then PC <- 

PC + SEXT (displ); 

Condition Codes: 

N <- index LSS @; 

Z <- index EQL @; 

V <- {integer overflow}; 

C <- C;3 
Exceptions: 

integer overflow 


Opcodes: 


F5 SOBGTR Subtract One and Branch Greater Than 


Description: 


One is subtracted from the index operand and the index 
replaced by the result. If the index operand is greater 
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operand is 
than @, the 


Sign-extended branch displacement is added to PC and PC is’7 replaced by 


the result. 


Notes: 


l. Integer overflow occurs if the index operand before subtraction 


is the largest negative integer. On overflow, 
operand is replaced by the largest positive integer, 
the branch is taken. 


2. The C-bit is unaffected. 


the index 
and thus 
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4.6 PROCEDURE CALL INSTRUCTIONS 


Three instructions are used to implement a standard procedure calling 
interface. Two instructions implement the CALL to the procedure; the 
third implements the matching RETURN. Refer to the VAX/VMS Run Time 
Library Reference Manual for the procedure calling standard. The CALLG 
instruction calls a procedure with the argument list actuals in an 
arbitrary location. The CALLS instruction calls a procedure with the 
argument list actuals on the stack. Upon return after a CALLS this list 
is automatically removed from the stack. Both call instructions specify 
the address of the entry point of the procedure being called. The entry 
point is assumed to consist of a word termed the entry mask followed by 
the procedure's instructions. The procedure terminates by executing a 
RET instruction. 


The entry mask specifies the subprocedure's register use and overflow 
enables: 


111141 

54321 Q 
$-+—-+---+------- --- -- - -- ----- + 
ID|I |MBz| REGISTERS | 
Ivivl | | 
+-+-+---4+----------------------- + 


On CALL the stack is aligned to a longword boundary and the trap enables 
in the PSW are set to a known state to enSure consistent behavior of the 
called procedure. Integer overflow enable and decimal overflow enable 
are affected according to bits 14 and 15 of the entry mask respectively. 
Floating underflow enable is cleared. The registers Rll through R@ 
specified by bits 11 through 9 respectively are saved on the stack and 
are restored by the RET instruction. In addition, PC, SP, FP, and AP 
are always preserved by the CALL instructions and restored by the RET 
instruction. 


All external procedure CALLS generated by standard DIGITAL language 
processors, and all inter-module CALLS to major VAX-11 software 
subsystems comply with the procedure calling software standard (see 
VAX/VMS Run Time Library Reference Manual, Appendix C). The procedure 
calling standard requires that all registers in the range R2 through Rll 
used in the procedure must appear in the mask. R@ and R1 are not 
preserved by any called procedure that complies with the procedure 
calling standard. 


In order to preserve the state, the CALL instructions form a structure 
on the stack termed a call frame or stack frame. This contains the 
saved registers, the saved PSW, the register save mask, and_ several 
control bits. The frame also includes a longword which the CALL 
instructions clear; this is used to implement the condition handling 
facility. Refer to Appendix D. At the end of execution of the CALL 
instruction, FP contains the address of the stack frame. The RET 
instruction uses the contents of FP to find the stack frame and restore 
State. The condition handling facility assumes that FP always points to 
the stack frame. The stack frame has the following format: 
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$——------------ - - - - - - - + 
| condition handler (initially @) | : (FP) 
$—---+-4-4----------------------- fo——-—-—--- - - - - - - - - - - - - -  -- - - - + 
ISPAIS|1@| mask<11:@> | saved PSW<15:5> | i) | 
+—-——+—-4-4--------—--------------- $—---—------------------ $—--------- + 
| Saved AP | 
$--------------- - -- - - - - - - - + - ++ + 
| saved FP | 
$—---------------- --- - - - - - - - - - - - - - - 5 + ++ + 
| saved PC | 
$—-—------ - - - - - - - - - - - - - - - - - - - - + + 
| saved RO (...) | 
$—-------------- - - -- - -- - - - - - - - - - - - + + 
$-------- + - - - - - - - -- -- ---- + + 
| saved Rll (...) | 
$o--------- -- - - - - - - - - - - - - - - - - ee 5 + + + 


(6 to 3 bytes specified by SPA, Stack Pointer Alignment) 


S = set if CALLS; clear if CALLG. 


Note that the saved condition codes and the saved trace enable (PSW<T>) 
are cleared. 


The contents of the frame PSW<3:0> at the time RET is executed will 
become the condition codes resulting from the execution of the 
procedure. Similarly, the content of the frame PSW<4> at the time _ the 
RET is executed will become the PSW<T> bit. 

The following instructions are described in this section. 


Instructions 
1. Call Procedure with General Argument List 1 
CALLG arglist.ab, dst.ab, {-(SP) .w*} 
2. Call Procedure with Stack Argument List 1 
CALLS numarg.rl, dst.ab, {-(SP) .w*} 
3. Return from Procedure 1 


RET {(SP)+.r*} 
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CALLG Call Procedure With General Argument List 
Format: 

opcode arglist.ab, dst.ab 
Operation: 

{align stack}; 

{create stack frame}; 

{set arithmetic exception enables}; 


{set new values of AP,FP,PC}; 


Condition Codes: 


N <- @; 
Z <- @; 
V <- @; 
C <- @; 


Exceptions: 
reserved operand 
Opcodes: 


FA CALLG Call Procedure with General Argument List 


Description: 


SP is saved in a temporary and then bits 1:8 are replaced by ® so that 
the stack is longword aligned. The procedure entry mask is scanned from 
bit 1l to ® and the contents of registers whose number corresponds’ to 
set bits in the mask are pushed on the stack as longwords. PC, FP, and 
AP are pushed on the stack as_ longwords. The condition codes are 
cleared. A longword containing the saved two low bits of SP in bits 
31:30, a @ in bit 29 and bit 28, the low 12 bits of the procedure entry 
mask in bits 27:16, and the PSW in bits 15:8 with T cleared is pushed on 
the stack. A longword @ is pushed on the stack. FP is replaced by SP. 
AP is replaced by the arglist operand. The trap enables in the PSW are 
set to a known state. Integer overflow, and decimal overflow are 
affected according to bits 14 and 15 of the entry mask respectively; 
Floating underflow is cleared. T-bit is unaffected. PC is replaced by 
the sum of deStination operand plus 2 which transfers control to the 
called procedure at the byte beyond the entry mask. 
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(8 to 3 bytes specified by SPA) 


l. If bits 13:12 of the entry mask are not 9, a reserved operand 
fault occurs. 


2. On a reserved operand fault, condition codes are UNPREDICTABLE. 


3. The procedure calling standard and the condition handling 
facility require the following register saving conventions. R@ 
and Rl are always available for function return values and are 
never saved in the entry mask. All registers R2 through Rll 
which are modified in the called procedure must be preserved in 
the mask. Refer to VAX/VMS Run Time Library Reference Manual, 
Appendix C. 
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CALLS Call Procedure with Stack Argument List 
Format: 

opcode numarg.rl, dst.ab 
Operation: 

{push arg count}; 

{align stack}; 

{create stack frame}; 

{set arithmetic exception enables}; 


{set new values of AP,FP,PC}; 


Condition Codes: 


N <- @; 
Z <- @; 
V <- @; 
C <- @; 


Exceptions: 
reserved operand 
Opcodes: 


FB CALLS Call Procedure With Stack Argument List 


Description: 


The numarg operand is pushed on the stack as a longword (byte @ contains 
the number of arguments, high order 24 bits are used by DIGITAL 
software). SP is saved in a temporary and then bits 1:8 of SP are 
replaced by @ so that the stack is longword aligned. The procedure 
entry mask is scanned from bit 11 to bit 8 and the contents of registers 
whose number corresponds to set bits in the mask are pushed on the 
stack. PC, FP, and AP are pushed on the stack as_ longwords. The 
condition codes are cleared. A longword containing the saved two low 
bits of SP in bits 31:30, alin bit 29, a @ in bit 28, the low 12 bits 
of the procedure entry mask in bits 27:16, and the PSW in bits 15:8 with 
T cleared is pushed on the stack. A longword @ is pushed on the stack. 
FP is replaced by SP. AP is set to the value of the stack pointer after 
the numarg operand was pushed on the stack. The trap enables in the PSW 
are set to a known state. Integer overflow, and decimal overflow, are 
affected according to bits 14 and 15 of the entry mask, respectively, 
floating underflow is cleared. T-bit is unaffected.PC is replaced by 
the sum of destination operand plus 2 which transfers control to the 
called procedure at the byte beyond the entry mask. The appearance of 
the stack after CALLS is executed is: 
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+-—-—--————— 

| 

| 

| 

| 

| 

| 

af me ae ae eo oe 

of ae ae a oe 

| 

fe ee ce ae ee oe oe 

4 as ee ee ee ae ee 

Notes: 
l. 
Qs 
3% 
4. 


rr ee + : (SP) 
| : (FP) 

| 

stack | 

| 

frame | 

| 

ee ae a ee + 

(9 to 3 bytes specified by SPA) 

—------------------ -- -- - - --- --- - -- - -- -- $+—---------------+ 
| N | : (AP) 

~----------------- -------- - -- -- - -------- $+—---------------+ 

P N longwords of argument list : 
ee eee cee ee ee wee eee wee ee ce ee wee ee wee ee ee wee wee ee ee ee ee ee es em wee we wee ee ee wee es we ee ee ee ee ee we oe wm we ee we wee we es wee we we we we oe ee oe + 


If bits 13:12 of the entry mask are not 8, a reserved operand 
Fault occurs. 


On a reserved operand fault, the condition codes are 
UNPREDICTABLE. 


Normal use is to push the arglist onto the stack in reverse 
order prior to the CALLS. On return, the arglist is removed 
From the stack automatically. 


The procedure calling standard and the condition handling 
facility require the following register saving conventions. R@ 
and Rl are always available for function return values and are 
never saved in the entry mask. All registers R2 through Rll 
which are modified in the called procedure must be preserved in 
the entry mask. Refer to VAX/VMS Run Time Library Reference 
Manual, Appendix C. 
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RET Return from Procedure 
Format: 

opcode 
Operation: 


{restore SP from FP}; 

{restore registers}; 

{drop stack alignment}; 

{if CALLS then remove arglist}; 
{restore PSW}; 


Condition Codes: 


N <- tmpl<3>; 
Z <- tmpl<2>; 
V <- tmpl<l>; 
C <- tmpl<d>; 


Exceptions: 
reserved operand 
Opcodes: 


G4 RET Return from Procedure 


Description: 


SP is replaced by FP plus 4. A longword containing stack alignment bits 
in bits 31:38, a CALLS/CALLG flag in bit 29, the low 12 bits of the 
procedure entry mask in bits 27:16, and a saved PSW in bits 15:8 is 
popped from the stack and saved in a temporary. PC, FP, and AP are 
replaced by longwords popped from the stack. A register restore mask is 
formed from bits 27:16 of the temporary. Scanning from bit @ to bit ll 
of the restore mask, the contents of registers whose number is indicated 
by set bits in the mask are replaced by longwords popped from the stack. 
SP is incremented by 31:38 of the temporary. PSW is replaced by bits 
15:8 of the temporary. If bit 29 in the temporary is 1 (indicating that 
the procedure was called by CALLS), a longword containing the number of 
arguments iS popped from the stack. Four times the unSigned value of 
the low byte of this longword is added to SP and SP is replaced by the 
result. 
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Notes: 


a ike 


A reserved operand fault occurs if tmpl<15:8> NEQ @. 


On a reserved operand fault, the condition codes are 
UNPREDICTABLE. 


The value of tmpl<28> is ignored. 


The procedure calling standard and condition handling facility 
assume that procedures which return ae function value or a 
Status code do so in RM or R@ and Rl. Refer to VAX/VMS~ Run 
Time Library Reference Manual, Appendix C. 
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4.7 MISCELLANEOUS INSTRUCTIONS 
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The following instructions are described in this section. 


1. Bit Clear PSW 
BICPSW mask.rw 


2. Bit Set PSW 
BISPSW mask.rw 


3. Breakpoint Fault 
BPT {-(KSP) .w*} 


4. Halt 
HALT {-(KSP) .w*} 


5. Index 


INDEX subsScript.rl, low.rl, high.rl, size.rl, 


indexout.wl 


6. Move from PSL 
MOVPSL dst.wl 


7. $\No Operation 
NOP 


8. Pop Registers 
POPR mask.rw, {(SP)+.r*} 


9. Push Registers 
PUSHR mask.rw, {-(SP).w*} 


10. Extended Function Call 
XFC {unspecified operands} 


Instructions 


1 
indexin.rl, 
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BICPSW Bit Clear PSW 
Format: 
opcode mask.rw 
Operation: 
PSW <- PSW AND {NOT mask}; 
Condition Codes: 
N <- N AND [NOT mask<3>} 
<- Z AND {NOT mask<2> } 
} 
} 


Z 
V <- V AND {NOT mask<l1> 
C <- C AND {NOT mask<@> 


; 
’ 
; 
: 
Exceptions: 

reserved operand 


Opcodes: 


B9 BICPSW Bit Clear PSW 


Description: 


PSW is ANDed with the ones complement of the mask 


replaced by the result. 


Notes: 


A reserved operand fault occurs if 


mask 


Rev 7 


<15:8> 
reserved operand fault, the PSW is not affected. 
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PSW is 


Zero. On a 
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BISPSW Bit Set PSW 
Format: 

opcode mask.rw 
Operation: 

PSW <- PSW OR mask; 
Condition Codes: 

N <- N OR mask<3>; 

Z <- Z OR mask<2>; 

V <- V OR mask<l>; 

C <- C OR mask<@>; 
Exceptions: 

reserved operand 


Opcodes: 


B8 BISPSW Bit Set PSW 


Description: 
PSW is ORed with the mask operand and PSW is replaced by the result. 
Notes: 


A reserved operand fault occurs if mask<15:8> is not zero. On a 
reserved operand fault, the PSW is not affected. 
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BPT Breakpoint Fault 
Format: 

opcode 
Operation: 


PSL<TP> <- @; 
{breakpoint fault}; !push current PSL on stack 


Condition Codes: 


N <- 
ZL, <= 
V<- 
C <= 


!'condition codes cleared after BPT fault 


Qaa s&s 


me ™e we TO 


Exceptions: 
none 
Opcodes: 


G3 BPT Breakpoint Fault 


Description: 


In order to understand the operation of this instruction, it is 
necessary to read Chapter 6. This instruction is used, together with 
the T-bit, to implement debugging facilities. 
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HALT Halt 
Format: 
opcode 
Operation: 
If PSL<current mode> NEQU kernel then 
{privileged instruction fault} 
else 


{halt the processor}; 


Condition Codes: 


N <- 6; !I£ privileged instruction fault 

Z <- 6; !condition codes are cleared after 

V <- @; !the fault. PSL saved on stack 

C <- @; !contains condition codes prior to HALT. 
N <- N; !If£ processor halt 

Z<~- Z? 

V <- V;3 

C <= C3 


Exceptions: 
privileged instruction 
Opcodes: 


9B HALT Halt 


Description: 


In order to understand the operation of this instruction it is necessary 
to read Chapter 6. If the process is running in kernel mode, the 
processor is halted. Otherwise, a privileged instruction fault occurs. 


Notes: 


This opcode is 8 to trap many branches to data. 
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INDEX Compute Index 


Format: 


opcode subscript.rl, low.rl, high.rl, 
Size.rl, indexin.rl, indexout.wl 


Operation: 
indexout <- {indexin + subscript} *size; 
if {subscript LSS low} or {subscript GTR high} 
then {subscript range trap}; 


Condition Codes: 


N <- indexout LSS @; 
; 


Z <- indexout EQL @ 
V <- @; 
C <- @; 


Exceptions: 
subscript range 
Opcodes: 
OA INDEX index 
Description: 


The indexin operand is added to the subscript operand and the sum 
multiplied by the size operand. The indexout operand is replaced by the 
result. If the subscript operand is less than the low operand or 
greater than the high operand, a subscript range trap is taken. 


Notes: 


1. No arithmetic exception other than subscript range can result 
from this instruction. Thus no indication is given if overflow 
occurs in either the add or multiply steps. If overflow occurs 
on the add step the sum is the low order 32 bits of the true 
result. If overflow occurs on the multiply step, the indexout 
operand iS replaced by the low order 32 bits of the true 
product of the sum and the subscript operand. In the normal 
use of this instruction, overflow cannot occur without a 
subscript range trap occurring. 


2. The index instruction is useful in index calculations for 
arrays of the fixed length data types (integer and floating) 
and for index calculations for arrays of bit fields, character 
Strings, and decimal strings. The indexin operand permits 
cascading INDEX instructions for multidimensional arrays. For 
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One-dimensional bit field arrays it also permits introduction 
of the constant portion of an index calculation which is not 


readily absorbed by address arithmetic. The following notes 
will show some of the uses of INDEX. 
The COBOL statements: 
81 A-ARRAY. 
@2 A PIC X(18) OCCURS 15 TIMES. 
G1 B PIC X(10). 
MOVE A(I) TO B. 
could compile to: 
INDEX I, #1, #15, #190, #9, R@ 


MOVC3 #18, A-1@(R®O], B. 


The PL/1 statements: 
DCL A(-3:180) BIT (5); 
A(I) = 1; 
could compile to: 
INDEX I, #-3, #10, #5, #3, R@ 


INSV #1, RO, #5, A; assumes A byte aligned 


The FORTRAN statements: 

INTEGER*4 A(L1:U1, L2:U2), I, J 

A(I,J) = 1 

could compile to: 
INDEX J, #L2, #U2, #M1, #8, RO; M1=U1-L1+1 
INDEX I, #L1l, #U1, #1, RO, RO; 


MOVL #1, A-a[R@); a = {{L2*Ml1} + Ll} *4 
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MOVPSL Move from PSL 
Format: 

opcode dst.wl 
Operation: 

dst <- PSL; 


Condition Codes: 


N <- N;3 
Li k=; 
V <- V3 
C <- C;3 


Exceptions: 
none 
Opcodes: 


DC MOVPSL Move from PSL 


Description: 


The destination operand is replaced by PSL (See Chapter 6). 
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NOP No Operation 
Format: 

opcode 
Operation: 

none 


Condition Codes: 


N <- N;3 
Z <=- Z3 
V <- V3 
C <- C; 


Exceptions: 
none 
Opcodes: 


G1 NOP No Operation 


Description: 


No operation is performed. 
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POPR Pop Registers 
Format: 

opcode mask.rw 
Operation: 


for tmp <- @ step 1 until 14 do 
if mask<tmp> EQL 1 then R[{tmp] <- (SP)+; 


Condition Codes: 


N <- N;> 
Z<- Z: 
V <- V;3 
C <- C3 


Exceptions: 
none 
Opcodes: 


BA POPR Pop Registers 


Description: 


The contents of registers whose number corresponds to set bits in the 
mask operand are replaced by longwords popped from the stack. R{[n] is 
replaced if mask<n> is set. The mask is Scanned from bit @ to bit 14. 
Bit 15 is ignored. 
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PUSHR Push Registers 
Format: 

opcode mask.rw 
Operation: 


for tmp <- 14 step -l until @ do 
if mask<tmp> EQL 1 then -(SP) <- R[(tmp]; 


Condition Codes: 


N <- N; 
Z<- Z;3 
V <- V3 
C <- C; 


Exceptions: 
none 
Opcodes: 


BB PUSHR Push Registers 


Description: 


The contents of registers whose number corresponds to set bits in the 
mask operand are pushed on the stack as longwords. R[n] is pushed if 
mask<n> is set. The mask is scanned from bit 14 to bit @. Bit 15 is 
ignored. 


Notes: 


The order of pushing is specified so that the contents of higher 
numbered registers are stored at higher memory addresses. This results 
in, say, a double floating datum stored in adjacent registers being 
stored by PUSHR in memory in the correct order. 
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XFC Extended Function Call 
Format: 

opcode 
Operation: 

{XFC fault}; 
Condition Codes: 


N <- 


me ™e0e NO TO 


QaQQ & 


Z 

V <- 

C 

Exceptions: 
none 


Opcodes: 


FC XFC Extended Function Call 


Description: 


In order to understand the operation of this 
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instruction, 


it 


is 


necessary to read Chapter 6. This instruction provides for customer 


defined extensions to the instruction set. 
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4.8 QUEVE INSTRUCTIONS 


A queue is a circular, doubly linked list. A queue entry is specified 
by its address. Each queue entry is linked to the next via a pair of 
longwords. The first longword is the forward link : it specifies’ the 
location of the succeeding entry. The second longword is the backward 
link : it specifies the location of the preceeding entry. The VAX-1l 
supports two distinct types of links : absolute, and self-relative. An 
absolute link contains the absolute address of the entry that it points 
to. A self-relative link contains a displacement from the present queue 
entry. A queue is classified by the type of link it uses. 


4.8.1 Absolute Queues 


Absolute queues use abSolute addresses as_ links. Queue entries are 
linked by a pair of longwords. 


The first (lowest addressed) longword is the forward link: the address 
of the succeeding queue entry. The second (highest addressed) longword 
is the backward link: the address of the preceding queue entry. A 
queue is specified by a queue header which is identical to a pair of 
queue linkage longwords. The forward link of the header is the address 
of the entry termed the head of the queue. The backward link of the 
header is the address of the entry termed the tail of the queue. The 
forward link of the tail points to the header. 


Two general operations can be performed on queues: insertion of entries 
and removal of entries. Generally entries can be inserted or removed 
only at the head or tail of a queue. (Under certain restrictions’ they 
can be inserted or removed elsewhere; this is discussed later.) 


The following contains examples of queue operations. An empty queue is 
Specified by its header at address H: 


3 
1 4) 
$o------------ ---- - - -- - - - - - - - - + - - - - - - - - + 
| H | :H 
fo ----- --- - - - - - - - - - - - - ee ee + 
| H | :H+4 
$---—----- --- - - - - - - - - - - - + 
3 Q 
1 


If an entry at address B is inserted into an empty queue (at either the 
head or tail), the queue is as shown below: 
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3 

1 4) 
fo------------------------- --- --- --- = - + - = - = = - = - +--+ +--+ ++ ~ 

| B | :H 
foo 5 5 5 5 +--+ +--+ - +--+ + 

| B | :H+4 
foe 5 +s + + +--+ + +--+ +--+ +--+ + 

3 4) 

1 

3 

1 4) 
$2 == = 5 5-5-5 5 5 + +--+ +--+ - + 

| H | :B 
$------------- +--+ +--+ -------- - + - - - - - +--+ - = = = - = + + 

| H | :Bt+4 
po------- +--+ +--+ +--+ - +--+ - = - +--+ - = --- -- +--+ - - -- - = ----- - ------ = + 
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If an entry at address A is inserted at the head of the queue, 
is as shown below: 


3 
1 
+. eee ees eee eee Seas es eee ee es Se ee cee ee ew ew, dee eee tee ee) me ee a Sam ees ct es ec Se ee ce ie ol es ei cw ee ees ees ee ee es ce we ee ee 
| A 
+-———— 
| B 
$-—-—-——-——- — — — — — 
3 
1 
3 
1 
fa a a ee 
| B 
$—-—-—-—-— —-— — — — ee ee ee 
| H 
fm a se ee ee eee ee ee ee oe ee ee ee ew we a a a ee 
3 
1 
3 
1 
$—-—-—---~—-—————- — — -— -— + 
| H 
+—-—-——— 
| A 
$-—-—- ee ee 
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the queue 


4) 
—+ 

| :H 
—+ 

| :H+4 
—+ 
4) 
Q 
—+ 

| 3A 
—+ 

| sA+4 
—+ 
4) 
4) 
—+ 

| :B 
—+ 

| :B+4 
—+ 
4) 
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Finally, if an entry at address C is inserted at the tail, the queue 
appears as follows: 


3 

l 4) 
$---------------------------- ------ ------ -- --- -- - +--+ +--+ +--+ ++ + 
| A | :H 
$------------------------------ -- ------ = - - - - -- +--+ - + +--+ - +--+ ++ + 
| C | :H+4 
$------------- - ~~ - +--+ 5+ + 

3 4) 

1 

3 

1 6) 
$--------------- ~~ - - +--+ + + + + +--+ + 
| B | : 
$------------------------- ---- -- -- ----- ----- ---- --- = --- = +--+ --- + 

| H | sA+4 
$--------------------------------- ---- -- +--+ +--+ +--+ - +--+ +--+ + 

3 4 

1 

3 

1 4) 
fo----------------- -- ------ - - - - - - -- - - - - - = - 5 +--+ - + +--+ + 
| C | :B 
$---------------------- - --- -- -- -- - - --- - - - - - +--+ - = - = = = = - = = + + 

| A | :B+4 
$--------------------------------------------------------------- + 

3 4) 

1 

3 

1 4) 
$--------~----------------------------------- -------------------- + 

| H | :c 
$---------- = +--+ + 5 +--+ - 5-5-5 +--+ + 
| B | :C+4 
$----------~------- +--+ + ++ -  - 5 5 5 == - == + 

3 4) 

1 


Following the above steps in reverse order gives the effect of removal 
at the tail and removal at the head. 
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If more than 1 process can perform operations on a queue Simultaneously, 
insertions and removals should only be done at the head or tail of the 
queue. If only 1 process (or 1 process at a time) can _ perform 
operations on a queue, insertions and removals can be made at other than 
the head or tail of the queue. In the example above with the queue 
containing entries A,B, and C, the entry at address B can be removed 
giving: 


3 

1 4) 
$---------------- - 5 + 5 5 + 5 ee + e+ 5 + === - + 
| A | :H 
$--------------------------- = + +--+ +--+ + +--+ +--+ + 
| C | sH+4 
oa --- +--+ +--+ +--+ - 5 +--+ - + 5-5 5-5-5 5-5 5-5-5 5 = = + + 

3 4) 

1 

3 

1 4) 
a + 
| C | :A 
poe an + 5 5 + + + + + + +++ + 
| H | sA+4 
penn nae 5 ne nee =e + 

3 Qg 

1 

3 

1 4) 
pao ------ - - $5 +--+ + +--+ + 

| H | :c 
po ------ - - $$ - - +--+ + + 5 + + + + +--+ + + 
| A | :Cct+4 
$--------------------------- - - - = - = - - +--+ +--+ +--+ -------- + 

3 4} 

1 


The reason for the above restriction is that operations at the head or 
tail are always valid because the queue header is always present; 
operations elsewhere in the queue depend on specific entries being 
present and may become invalid if another process is simultaneously 
performing operations on the queue. 


Two instructions are provided for manipulating absolute queues =: 
INSQUE, and REMQUE. INSQUE inserts an entry specified by an entry 
operand into the queue following the entry specified by the predecessor 
operand. REMQUE removes the entry specified by the entry operand. 
Queue entries can be on arbitrary byte boundaries. Both INSQUE- and 
REMQUE are implemented as non-interruptible instructions. 
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4.8.2 Self-relative Queues 


Self-relative queues uSe displacements from queue entries as_ links. 
Queue entries are linked by a pair of loncgwords. The first longword 
(lowest addressed) is the forward link : displacement of the succeeding 
queue entry from the present entry. The second longword (highest 
addressed) is the backward link: the displacement of the preceding 
queue entry from the present entry. A queue is specified by a queue 
header, which also consists of two longword links. 


The following contains examples of queue operations. An empty queue is 
Specified by its header at address H. Since the queue is empty, the 
self-relative links must be zero as shown below: 


3 
1 4) 
$—-—------- - --- - -- - - - - - - - - + + 
| iy | :H 
$—-—---—--—-- - —- —- —- —- - - - - - - - - - ee + 
| g | s:H+4 
$—------------- - - - - - - - - -- - - - - - - - - - - - + 
3 Qg 
1 


If an entry at address B is inserted into an empty queue (at either’ the 
head or tail), the queue is as Shown below: 


3 

1 4) 
$------------------------------- -------- - ------- - = - +--+ - == -- +++ + 
| B-H | :H 
fon en nn on en ee ee ee ee +--+ + 
| B - H | s:H+4 
$--------------------------------------------------------------- + 

3 Gg 

1 

3 

1 4) 
poe------------------ +--+ +--+ ------ - --- --- - - = - = -- -- -- == + 

| H - B | :B 
pone --- +--+ -- +--+ + + +--+ = = = 5 = == == + 

| H - B | :B+4 
po------ +--+ - +--+ + + + + +--+ - = = = = - = - = = - = -- + 

3 y) 
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If an entry at address 
is as shown below: 
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is inserted at the head of the queue, 
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the queue 


3 

1 Q 
$-------------- -- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -- = + 
| A-4H | :H 
f———----- - - - - - - - - - - - + 

| B H | :H+4 
+—------------ - - - - -- - - - - - ee - - -  - + 

3 4) 

a 

3 

1 4) 
4+—-------------- -- - - - - - —- - - - - - - - ee + 

| B A | sA 
+—------------- - - - - - - - - - + ee eee + 

| H A | sA+4 
rrr rr rr eee + 

3 4) 

1 

3 

1 4) 
4—------—-—---——--- — - —- —- —- - - - - - - - + 
| H B | :B 
+—--------------—- - —-- - - - - -- - - - - - - - - + + 
| A B | :Bt+4 
+—-—---------—-- —-- - - - - - - - - - - - - - - - - - - - - - - - + + 

3 4) 
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Finally, if an entry at address C is inserted at the tail, the queue 
appears as follows: 


3 

1 g 
te nn + + 
| A- 4H | :H 
ha errr nnn + 
| C - 4H | sH+4 
ha == + 

3 i) 

1 

3 

1 Q 
$n + 
| B-A | 3A 
= + 
| H-A | :A+4 
fe + 

3 iy) 

1 

3 

1 9 
$----------------- —- - - - - - - - - - - - - - - = = + 
| C-B | :B 
he a eee + 
| A-B | :Bt+4 
$e eH 5 5 - + 

3 i) 

1 

3 

1 
te a errr + 
| H -C ae 
f—--—------------ - -- —- - - - - - - - - - - ee + 
| B-C | :C+4 
fe rrr ree + 

3 Q 

1 


Following the above steps in reverse order gives the effect of removal 
at the tail and removal at the head. 


Four operations can be performed on self-relative queues : insert at 
head, insert at tail, remove from head, and remove from tail. 
Furthermore, these operations are interlocked to allow cooperating 
processes in a multiprocessor system to access a shared list without 
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additional synchronization. Queue entries must be gquadword aligned. 
Hardware supported interlocked memory access mechanism is used to read 
the queue header. Bit 8 of the queue header is used aS a_ secondary 
interlock and is set when the queue is being accessed. If an 
interlocked queue instruction encounters the Secondary interlock set, it 
terminates after setting the condition codes to indicate failure to gain 
access to the queue. If the Secondary interlock bit is not set, then 
the interlocked queue instruction sets it during its operation and 
clears it at instruction completion. This prevents other interlocked 
queue instructions from operating on the same queue. 


4.8.3 Instruction Descriptions 


The following instructions are described in this section. 


Instructions 

1. Insert Entry into Queue at Head, Interlocked 1 
INSQHI entry.ab, header.aq 

2. Insert Entry into Queue at Tail, Interlocked 1 
INSQTI entry.ab, header.aq 

3. Insert Entry in Queue 1 
INSQUE entry.ab, pred.ab 

4. Remove Entry from Queue at Head, Interlocked 1 
REMQHI header.aq, addr.wl 

5. Remove Entry from Queue at Tail, Interlocked 1 
REMQTI header.aq, addr.wl 

6. Remove Entry from Queue t 


REMQUE entry.ab, addr.wl 
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INSQHI Insert Entry into Queue at Head, Interlocked 
Format: 

opcode entry.ab, header.aqg 
Operation: 


tmpl <- (header) {interlocked}; !acquire hardware interlock 
Imust have write access’ to 


header 
'header must be quadword aligned 
theader cannot be equal to entry 
!tmpl<2:1> must be zero 
if tmpl<@> EQLU 1 then 
_RAINBW:: TTA1:,NUNES L545 293.57 «19 
begin 
(header) {interlocked} <- tmpl; !release hardware 
interlock 
{set condition codes and terminate instruction}; 
end; 
else 
begin 
(header) {interlocked} <- tmpl v 1; !set secondary 
interlock 
!release hardware 
interlock 


If {all memory accesses can be completed} then 
!check if following addresses can be written 
!without causing a memory management exception: 
! entry 
! header + tmpl 
!Also, check for quadword alignment 
begin 
{insert entry into queue}; 

{release secondary interlock}; 
end; 

else 

begin 
{release secondary interlock}; 
{backup instruction}; 
{initiate fault}; 
end; 

end; 
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Condition Codes: 


if {insertion succeeded} then 


begin 
N <- @; 
Z <- (entry) EQL (entry+t4); !first entry in queue 
V <- @; 
C <- @; 
end; 
else 
begin 
N <- @; 
Z<- @3 
V <- @;3 
C <- 1; !secondary interlock failed 
end; 


Exceptions: 
reserved operand 
Opcodes: 


5C INSQHI Insert Entry into Queue at Head, Interlocked 


Description: 


The entry specified by the entry operand is inserted into the queue 


following the header. If the entry inserted was the first one in the 
queue, the condition code Z-bit is set; otherwise it is cleared. The 
insertion is a non-interruptible operation. The insertion is 


interlocked to prevent concurrent interlocked insertions or removals at 
the head or tail of the same queue by another process even in a 
multiprocessor environment. Before performing any part of the 
operation, the processor validates that the entire operation can be 
completed. This ensures that if a memory management exception occurs 
(See Chapters 5 and 6), the queue is left in a consistent state. If the 
instruction fails to acquire the secondary interlock, the instruction 
sets condition codes and terminates. 
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Notes: 


Ls 


Because the insertion is non-interruptible, processes’ running 
in kernel mode can Share queues with interrupt service routines 
(See Chapters 5, 6, and 7). 


The INSQHI, INSQTI, REMQHI, and REMQTI instructions are 
implemented such that cooperating software processes ina 
multiprocessor may access a shared list without additional 
synchronization. 


To set a software interlock realized with a queue, the 
following can be used: 


INSERT: INSQHI ... ;waS queue empty? 
BEQL 1s ;yes 
BCS INSERT ;try inserting again 
CALL WAIT(...) sno, Wait 

1S: 


During access validation, any access which cannot be completed 
results in a memory management exception even though the queue 
insertion is not started. 


A reserved operand fault occurs if entry or header is an 
address that is not quadword aligned (i.e. <2:8> NEQU @) or if 
(header)<2:1> is not zero. A reserved operand fault also 
occurs if header equals entry. In this case the queue is not 
altered. 
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INSQTI 
Format: 

opcode 
Operation: 

tmpl <- 


header 


Insert Entry into Queue at Tail, Interlocked 


entry.ab, header.aq 


(header) {interlocked}; !acquire hardware interlock 
Imust have write access’ to 


'header must be quadword aligned 
!header cannot be equal to entry 
!tmpl<2:1> must be zero 


if tmpl<@> EQLU 1 then 


interlock 


else 


interlock 


interlock 


begin 
(header) {interlocked} <- tmpl; 'release hardware 


{set condition codes and terminate instruction}; 
end; 


begin 
(header) {interlocked} <- tmpl v 1; !set secondary 


!'release hardware 


If {all memory accesses can be completed} then 
'check if the following addresses can be written 
!without causing a memory management exception: 


: entry 

! header + (header + 4) 
!Also, check for quadword alignment 
begin 


{insert entry into queue}; 
{release secondary interlock}; 
end; 

else 
begin 
{release secondary interlock}; 
{backup instruction}; 
{initiate fault}; 
end; 

end; 
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Condition Codes: 


if {insertion succeeded} then 
begin 
N <- @ 
Z<- ( 
V <- @ 
C <- @ 
end; 


ntry) EQL (entry+t4); !first entry in queue 


me me 40) me 


else 
begin 
N <- 
Z<- 
V <- 
C <- 
end; 


HM QQ ® 


me %e TO WO 


!secondary interlock failed 


Exceptions: 
reserved operand 
Opcodes: 


5D INSQTI Insert Entry into Queue at Tail, Interlocked 


Description: 


The entry specified by the entry operand is inserted into the queue 


preceding the header. Tf the entry inserted was the first one in the 
queue, the condition code Z-bit is set; otherwise it is cleared. The 
insertion is a non-interruptible operation. The insertion is 


interlocked to prevent concurrent interlocked insertions or removals at 
the head or tail of the same queue by another process even ina 
multiprocessor environment. Before performing any part of the 
operation, the processor validates that the entire operation can be 
completed. This ensures that if a memory management exception occurs 
(See Chapters 5 and 6), the queue is left in a consistent state. If the 
instruction fails to acquire the secondary interlock, the instruction 
sets condition codes and terminates. 
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Notes: 


1. 


Because the insertion is non-interruptible, processes running 
in kernel mode can share queues with interrupt Service routines 
(See Chapters 5, 6, and 7). 


The INSQHI, INSQTI, REMQHI, and REMQTI instructions are 
implemented such that cooperating software processes ina 


multiprocessor may access a Shared list without additional 
synchronization. 


To set a software interlock realized with a queue, the 
Following can be used: 


INSERT: INSOHI ... ;was queue empty? 
BEQL 1$ ;yes 
BCS INSERT ;try inserting again 
CALL WAIT(...) sno, wait 

1S: 


During access validation, any access which cannot be completed 
results in a memory management exception even though the queue 
insertion is not started. 


A reserved operand fault occurs if entry, header, or (headert4) 
is an address that is not quadword aligned (i.e. <2:8> NEQU Q@) 
or if (header)<2:1> is not zero. A reserved operand fault also 
occurs if header equals entry. In this case the queue is not 
altered. 
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INSQUE Insert Entry in Queue 
Format: 

opcode entry.ab, pred.ab 
Operation: 


If {all memory accesses can be completed} then 


begin 
(entry) <- (pred); !forward link of entry 
(entry + 4) <- pred; 'backward link of entry 
((pred) + 4) <- entry; !'backward link of Successor 
(pred) <- entry; !'forward link of predecessor 
end; 

else 
begin 


{backup instruction}; 
{initiate fault}; 
end; 


Condition Codes: 


N <- (entry) LSS (entry+4); 

Z <- (entry) EQL (entry+t4) ; !'first entry in queue 
V <- @; 

C 


<- (entry) LSSU (entry+t4); 
Exceptions: 

none 
Opcodes: 


OE INSQUE Insert Entry in Queue 


Description: 


The entry specified by the entry operand is inserted into the queue 
following the entry specified by the predecessor operand. If the entry 
inserted was the first one in the queue, the condition code Z-bit is 
set; otherwise it is cleared. The insertion is a non-interruptible 
operation. Before performing any part of the operation, the processor 
validates that the entire operation can be completed. This ensures that 


if a memory management exception occurs (See Chapters 5 and 6), the 
queue is left in a consistent state. 
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Notes: 


i em 


Three types of insertion can be performed by appropriate choice 
of predecessor operand: 


ey Insert at head 
INSQUE entry,h sh is queue head 
2. Insert at tail 


INSQUE entry,@ht+4 zh is queue head 
(Note "@" in this case only) 


3. Insert after arbitrary predecessor 


INSQUE entry,p 7p is predecessor 


Because the insertion is non-interruptible, processes running 
in kernel mode can share queues with interrupt service routines 
(See Chapters 5, 6, and 7). 


The INSQUE and REMQUE instructions are implemented such that 
cooperating software processes in a Single processor may access 
a shared list without additional synchronization if the 
insertions and removals are only at the head or tail of the 
queue. 


To set a software interlock realized with a queue, the 
following can be used: 


INSQUE ... ;waS queue empty? 
BEQL 1$ ;yes 
CALL WAIT(...) ;no, wait 


1S: 


During access validation, any access which cannot be completed 
results in a memory management exception even though the queue 
insertion is not started. 
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REMQHI 
Format: 

opcode 
Operation: 

tmpl <- 


header 


addr 


Remove Entry from Queue at Head, Interlocked 


header.aq, addr.wl 


(header) {interlocked}; !acquire hardware interlock 
Imust have write access’ to 


'header must be quadword aligned 
!header cannot equal address of 


!tmpl<2:1> must be zero 


if tmpl<@> EQLU 1 then 


interlock 


else 


interlock 


interlock 


begin 
(header) {interlocked} <- tmpl; !'release hardware 


{set condition codes and terminate instruction}; 
end; 


begin 
(header) {interlocked} <- tmpl v 1; !set secondary 


'release hardware 


If {all memory accesses can be completed} then 
'tcheck if the following can be done without 
!cauSing a memory management exception: 
!'write addr operand 
!'read contents of header + tmpl {if tmpl NEQU 9} 
Iwrite into header + tmpl + (header + tmpl) {if 
! tmpl NEQU 9} 
!Also, check for quadword alignment 
begin 
{remove entry from queue}; 
{release secondary interlock}; 
end; 
else 
begin 
{release secondary interlock}; 
{backup instruction}; 
{initiate fault}; 
end; 
end; 
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Condition Codes: 


if {removal succeeded} then 


begin 
N <- @;3 
Z <- (header) EQL @; !'queue empty 
V <- tmpl EQL @; 'no entry to remove 
C <- @; 
end; 
else 
begin 
N <- @;3 
Z <- @;3 
V <- 1; !did not remove anything 
C <= 1; !'secondary interlock failed 
end; 


Exceptions: 
reserved operand 
Opcodes: 


5E REMQHI Remove Entry from Queue at Head, Interlocked 


Description: 


The queue entry following the header is removed from the queue. The 
address operand is replaced by the address of the entry removed. If no 
entry was removed from the queue (because either there was nothing’ to 
remove or secondary interlock failed), the condition code V bit is set; 
otherwise it is cleared. If the interlock succeeded and the queue is 
empty at the end of this instruction, the condition code Z-bit is set; 
otherwise it is cleared. The removal is interlocked to prevent 
concurrent interlocked insertions or removals at the head or tail of the 
Same queue by another process even in a multiprocessor environment. The 
removal is a non-interruptible operation. Before performing any part of 
the operation, the processor validates that the entire operation can be 
completed. This ensures that if a memory management exception occurs 
(See Chapters 5 and 6), the queue is left in a consistent state. If the 
instruction fails to acquire the Secondary interlock, the instruction 
sets condition codes and terminates without altering the queue. 
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Notes: 


i lee 


6. 


Because the removal is non-interruptible, processes running in 
kernel mode can share queues with interrupt Service routines 
(See Chapters 5, 6, and 7). 


The INSQHI, INSQTI, REMQHI, and REMOTI instructions are 
implemented such that cooperating software processes ina 
multiprocessor may access a shared list without additional 
synchronization. 


To release a software interlock realized with a queue, the 
following can be used: 


1S: REMQHI ... sremoved last? 
BEQL 2$ ;yes 
BCS 1$ ;try removing again 
CALL ACTIVATE (...) sActivate other waiters 
2S: 


To remove entries until the queue is empty, the following can 
be used: 


1S: REMQHI ... ;anything removed? 
BVS 2$ ;no 
process removed entry 


BR 1$ ; 


2S: BCS 1$ ;try removing again 
queue empty 


During access validation, any access which cannot be completed 
results in a memory management exception even though the queue 
removal is not started. 


A reserved operand fault occurs if header or (header + 
(header)) is an address that is not quadword aligned (i.e. 
<2:0> NEQU @) or if (header)<2:1> is not zero. A reserved 
operand fault also occurs if the header address operand equals 
the address of the addr operand. In this case the queue is not 
altered. 


Instructions 


12-Feb-82 -- Rev 7 Page 4-119 


QUEUE INSTRUCTIONS 


REMOQTI 
Format: 

opcode 
Operation: 

tmpl <- 


header 


addr 


Remove Entry from Queue at Tail, Interlocked 


header.aq, addr.wl 


(header) {interlocked}; t!acquire hardware interlock 
I'must have write access to 


'header must be quadword aligned 
'header cannot equal address of 


f!tmpl<2:1> must be zero 


if tmpl<@> EQLU 1 then 


interlock 


else 


interlock 


interlock 


B } 


begin 
(header) {interlocked} <- tmpl; 'release hardware 


{set condition codes and terminate instruction}; 
end; 


begin 
(header) {interlocked} <- tmpl v 1; !set secondary 


'release hardware 


If {all memory accesses can be completed} then 
'check if the following can be done without 
!causing a memory management exception 
'write addr operand 
!read contents of header + (header + 4) {if tmpl 


! NEQU @} 
'write into header + (header + 4) 
! + (header + 4 + (header + 4)) {if tmpl NEQU 


!Also, check for quadword alignment 
begin 
{remove entry from queue}; 
{release secondary interlock}; 
end; 

else 
begin 
{release secondary interlock}; 
{backup instruction}; 
{initiate fault}; 
end; 

end; 
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Condition Codes: 


if {removal succeeded} then 


begin 
N <- @; 
Z <- (header + 4) EQL @; !queue empty 
V <- tmp3 EQL @ 'no entry to remove 
C <- @; 
end; 
else 
begin 
N <- @;3 
Z <- O; 
V <- 1; !did not remove anything 
C <- 1; !'secondary interlock failed 
end; 


Exceptions: 
reserved operand 
Opcodes: 


5F REMQTI Remove Entry from Queue at Tail, Interlocked 


Description: 


The queue entry preceding the header is removed from the queue. The 
address operand is replaced by the address of the entry removed. If no 
entry was removed from the queue (because either there was nothing’ to 
remove or secondary interlock failed), the condition code V bit is set; 
otherwise it is cleared. If the interlock succeeded and the queue is 
empty at the end of this instruction, the condition code Z-bit is set; 
otherwise it is cleared. The removal is interlocked to prevent 
concurrent interlocked insertions or removals at the head or tail of the 
same queue by another process even in a multiprocessor environment. The 
removal is a non-interruptible operation. Before performing any part of 
the operation, the processor validates that the entire operation can _ be 
completed. This ensures that if a memory management exception occurs 
(See Chapters 5 and 6), the queue is left in a consistent state. If the 
instruction fails to acquire the secondary interlock, the instruction 
sets condition codes and terminates without altering the queue. 
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Notes: 


Ly 


Because the removal is non-interruptible, processes running in 
kernel mode can share queues with interrupt service routines 
(See Chapters 5, 6, and 7). 


The INSQHI, INSQTI, REMQHI, and REMOTI- instructions are 
implemented such that cooperating software processes ina 
multiprocessor may access a shared list without additional 
synchronization. 


To release a software interlock realized with a queue, the 
following can be used: 


1S: REMQTI ... ;removed last? 
BEQL 2$ ;yes 
BCS 1$ ;try removing again 


CALL ACTIVATE (...) ;Activate other waiters 


2S: 


To remove entries until the queue is empty, the following can 
be used: 


1$: REMQTI ... ;anything removed? 
BVS 2$ ;no 


process removed entry 


BR 1$ ; 


2S: BCS 1$ ;try removing again 
queue empty 


During access validation, any access which cannot be completed 
results in a memory management exception even though the queue 
removal is not started. 


A reserved operand fault occurs if header, (header + 4), or 
(header + (header + 4)+4) is an address that is not quadword 
aligned (i.e. <2:0> NEQU @) or if (header)<2:1> is not Zero. 
A reserved operand fault also occurs if the header address 
operand equals the address of the addr operand. In this ' case 
the queue is not altered. 
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REMQUE Remove Entry From Queue 
Format: 

opcode entry.ab,addr.wl 
Operation: 


if {all memory acceses can be completed} then 
begin 


((entry+4)) <- (entry); !forward link of predecessor 
((entry)+4) <- (entry +4);!backward link of successor 
addr <- entry; 
end; 
else 
begin 
{backup instruction}; 
{initiate fault}; 
end; 


Condition Codes: 
N <- (entry) LSS (entry+t4); 


Z <- (entry) EQL (entryt4); 'queue empty 


V <- entry EQL (entry+4); Ino entry to remove 
C <- (entry) LSSU (entryt4); 


Exceptions: 
none 
Opcodes: 


OF REMQUE Remove Entry from Queue 


Description: 


The queue entry specified by the entry operand is removed from the 
queue. The address operand is’ replaced by the address of the entry 
removed. If there waS no entry in the queue to be_ removed, the 
condition code V bit is set; otherwise it is cleared. If the queue is 
empty at the end of this instruction, the condition code Z-bit is. set; 
otherwise it is cleared. The removal is a non-interruptible operation. 
Before performing any part of the operation, the processor validates 
that the entire operation can be completed. This ensures that if a 
memory management exception occurs (See Chapters 5 and 6), the queue is 
left in a consistent state. 
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Notes: 


l. 


Three types of removal can be performed by suitable choice of 
entry operand: 


1. Remove at head 
REMQUE @h,addr sh is queue header 
2. Remove at tail 


REMQUE @h+t4,addr ;h is queue header 
3. Remove arbitrary entry 


REMQUE entry,addr ; 


Because the removal is non-interruptible, processes running in 
kernel mode can _ share queues with interrupt service routines 
(See Chapters 5, 6, and 7). 


The INSQUE and REMQUE instructions are implemented such that 
cooperating software processes in a Single processor may access 
a shared list without additional synchronization if the 
insertions and removals are only at the head or tail of the 
queue. 


To release a software interlock realized with a queue, the 
followng can be used: 


REMQUE  ... ;queue empty? 
BEQL 1$ ryes 
CALL ACTIVATE (...) ;Activate other waiters 


1S: 


To remove entries until the queue is empty, the following can 
be used: 


1S: REMQUE ... ;anything removed? 
BVS EMPTY 7;no 
BR 1$ ; 


During access validation, any access which cannot be completed 


results in a memory management exception even though the queue 
removal is not started. 
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4.9 FLOATING POINT INSTRUCTIONS 


The floating point instructions operate on four data types. F floating 
and D_floating instructions are standard on all VAX _ processors. 


G floating and H floating instructions are optional on the VAX-11/789 
and the VAX-11/75@; standard on the VAX-11/7390. 


In order to be consistent with the floating point instruction set which 
faults on reserved operands (See Chapter 2), software implemented 
Floating point functions (e.g., the absolute function) should verify 
that the input operand(s) is (are) not reserved. An easy way to do this 
is a floating move or test of the input operand(s). 


In order to facilitate high speed implementations of the floating point 
instruction set, certain restrictions are placed on the addressing mode 
combinations usable within a single floating point instruction. These 
combinations involve the logically inconsistent simultaneous use of a 
value as both a floating point operand and an address. 


Specifically: if within the same instruction the contents of register 
Rn is used as both a part of a floating point input operand (i.e., a 
orf, .rd, .rg, .rh, .mf£f, .md, .mg, or .mh operand) and as an address in 
an addressing mode which modifies Rn (1.684 autoincrement, 
autodecrement, or autoincrement deferred), the value of the floating 
point operand is UNPREDICTABLE. 


4.9.1 Introduction 


Mathematically, a floating point number may be defined as having’ the 
form 


(+ or -) (2**K)*£, 


where K is an integer and f£ iS a non-negative fraction. For a 
non-vanishing number, K and f are uniquely determined by imposing the 
condition 


1/2 LEQ f£ LSS l. 


The fractional factor, £, of the number is then said to be binary 
normalized. For the number zero, f must be asSigned the value @, and 
the value of K is indeterminate. 


The VAX-l1l1 floating point data formatsS are derived from this 
mathematical representation for floating point numbers. Four types of 
floating point data are provided : the two standard PDP-11l formats 
(F floating and D_ floating), and two extended range formats (G_floating 
and H floating). Single precision, or floating, data is 32 bits long. 
Double precision, or D floating, data is 64 bits long. Extended range 
double precision, or G floating, data is 64 bits long. Extended range 
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quadruple precision, or H floating, data is 128 bits long. Sign 
magnitude notation is used, as follows: 


1. Non-zero floating point numbers: 


The most significant bit of the floating point data is the sign bit: 
® for positive, and 1 for negative. 


The fractional factor f is assumed normalized, so that itS most 
Significant bit must be l. This 1 is the "hidden" bit: it is not 
stored in the data word, but of course the hardware restores it 
before carrying out arithmetic operations. The F floating and 
D floating data types use 23 and 55 bits, respectively, for £, which 
with the hidden bit, imply effective significance of 24 bits and 56 
bits for arithmetic operations. The extended range data types, 
G floating and H floating, use 52 and 112 bits, respectively, for f, 
which with the hidden bit, imply effective significance of 53 and 
113 bits for arithmetic operations. 


In the F_ floating and D floating data types, eight bits are reserved 
for the storage of the exponent K in excess 128 notation. Thus 
exponents from -128 to +127 could be represented, in biased form, by 
® to 255. For reasons given below, a biased EXP of @ (true exponent 
of -128), is reserved for floating point Zero. Thus, for the 
F floating and D floating data types, exponents are restricted to 
the range -127 to +127 inclusive, or in excess 128 notation, 1 to 
255. 


In the G floating data type eleven bits are reserved for the storage 
of the exponent in excess 1024 notation. In the H floating data 
type fifteen bits are reserved for the storage of the exponent in 
excess 16384 notation. A biased exponent of 9 is reserved for 
floating point zero. Thus, exponents are restricted to -1%923 to 
+1923 inclusive (in excess notation, 1 to 2047), and -16383 to 
+16383 inclusive (in excess notation, 1 to 32767) for the G floating 
and H_ floating data types respectively. 


2. Floating point zero: 


Because of the hidden bit, the fractional factor is not available to 
distinguish between zero and non-zero numbers’ whose fractional 
factor is exactly 1/2. Therefore the VAX-11 reserves a 
Sign-exponent field of 9@ for this purpose. Any positive floating 
point number with biased exponent of @ is treated as if it were an 
exact @ by the floating point instruction set. In particular, a 
floating point operand, whose bits are all O's, is treated as zero, 
and this is the format generated by all floating point instructions 
for which the result is zero. 


3. The Reserved Operands: 


A reserved operand is defined to be any bit pattern with a sign bit 
of one anda biased exponent of zero. On the VAX-11, all floating 
point instructions generate a fault if a reserved operand is 
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encountered. A reserved operand is never generated as a result of a 
floating point instruction. 


4.9.2 Overview Of The Instruction Set 


The VAX-11 has the standard arithmetic operations ADD, SUB, MUL, and DIV 
implemented for all four floating data types. The results of these 
operations are always rounded, as described in the section on accuracy. 
It has, in addition, two composite operations, EMOD and POLY, also 
implemented for all four floating point data types. EMOD generates a 
product of two operands, and then separates the product into its integer 
and fractional terms. POLY evaluates a polynomial, given the degree, 
the argument and pointer to a table of coefficients. Details on the 
operation of EMOD and POLY are given in their respective descriptions. 
All of these instructions are subject to the rounding errors associated 
with floating point operations, as well as to exponent overflow and 
underflow. Accuracy is discussed in the next section, and exceptions 
are discussed in Chapter 6. 


The VAX-11 also has a complete set of instructions for conversion from 
integer arithmetic types (byte, word, longword) to all floating types 
(F_ floating, D_ floating, G floating, H_ floating), and vice versa. The 
VAX-11 also has a set of instructions for conversion between all of the 
floating types except between D_ floating and G floating. Many of these 
instructions are exact, in the sense defined in the section on accuracy 
to follow. However, a few may generate rounding error, floating 
overflow, floating underflow, or induce integer overflow. Details are 
given in the description of the CVT instructions. 


There is a class of move-type instructions which are always exact: MOV, 
NEG, CLR, CMP, andTST. And, finally, there is the ACB (add, compare 
and branch) instruction, which is subject to rounding errors, overflow 
and underflow. 


All of the floating point instructions on the VAX-1l fault if a reserved 
operand is encountered. Floating point instructions also fault on the 
occurrence of floating overflow or divide by zero, and the _ condition 
codes are UNPREDICTABLE. The FU bit, in the PSW, is available to enable 
or disable an exception on underflow. If the FU bit is clear, no 
exception occurs on underflow and zero is returned as the result. If 


the FU bit is set, a fault occurs on underflow. Further details on the 
actions taken if any of these exceptions occurs are included in the 


descriptions of the instructions, and completely discussed in Chapter 6. 


4.9.3 Accuracy 


General comments on the accuracy of the VAX-11 floating point 
instruction set are presented here. The descriptions of the individual 
instructions may include additional details on the accuracy at which 
they operate. 
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An instruction is defined to be exact if its result, extended on the 
right by an infinite Sequence of zeroes, is identical to that of an 
infinite precision calculation involving the same operands. The a 
priori accuracy of the operands is thus ignored. For all arithmetic 
operations, except DIV, a zero operand implies that the instruction is 
exact. The same statement holds’ for DIV if the zero operand is the 
dividend. But if it is the divisor, division is undefined and the 
instruction faults. 


For non-zero floating point operands, the fractional factor is’ binary 
normalized with 24 or 56 bits for single precision (F floating) or 
double precision (D floating), respectively; and 53 or 113 bits’ for 
extended range double precision (G floating), and extended range 
quadruple precision (H floating), respectively. We show below that for 
ADD, SUB, MUL and DIV, an overflow bit, on the left, and two guard bits, 
on the right, are necessary and sufficient to guarantee return of a 
rounded result identical to the corresponding infinite precision 
operation rounded to the specified word length. Thus, with two guard 


bits, a rounded result has an error bound of 1/2 LSB (least significant 
bit). 


Note that an arithmetic result is exact if no non-zero bits are lost in 
chopping the infinite precision result to the data length to be stored. 
Chopping is defined to mean that the 24 (F floating), 56 (D floating), 
53 (G_ floating), or 113 (H floating) high order bits of the normalized 
fractional factor of a result are stored; the rest of the bits. are 
discarded. The first bit lost in chopping is’7 referred to as the 
"rounding" bit. The value of a rounded result is related to the chopped 
result as follows: 


1. If the rounding bit is one, the rounded result is the chopped 
result incremented by an LSB (least significant bit). 


2. If the rounding bit is zero, the rounded and chopped results 
are identical. 


All VAX-11 processors implement rounding so as _ to_ produce results 
identical to the results produced by the following algorithm. Adda 1 
to the rounding bit, and propagate the carry, if it occurs. Note that a 
renormalization may be required after rounding takes place; if this 
happens, the new rounding bit will be zero, so it can happen only once. 
The following statements summarize the relations among chopped, rounded 
and true (infinite precision) results: 


1. If a stored result is exact 
rounded value = chopped value = true value. 
2. If a stored result is not exact, it's magnitude 


1. is always less than that of the true result for chopping. 


Instructions 2-Feb-81 -- Rev 6.2 Page 4-119 
FLOATING POINT INSTRUCTIONS 


2. is always less than that of the true result for rounding if 
the rounding bit is zero. 


3. is greater than that of the true result for rounding if the 
rounding bit is one. 
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4.9.4 Instruction Descriptions 


The following instructions are described in this section. 


Instructions 

1. Add 2 Operand 4 
ADD{F,D,G,H}2 add.rx, sum.mx 

2. Add 3 Operand 4 
ADD{F,D,G,H}3 addl.rx, add2.rx, sum.wx 

3. Clear 3 
CLR{L=F,Q=D=G,O0=H} dst.wx 

4. Compare 4 
CMP{F,D,G,H} srel.rx, src2.rx 

5. Convert 34 
CVT{F,D,G,H}{B,W,L,F,D,G,H} srce.rx, dst.wy 
CVT{B,W,L}{F,D,G,H} srce.rx, dst.wy 
All pairs except FF,DD,GG,HH,DG, and GD 

6. Convert Rounded 4 
CVTR{F,D,G,H}L sre.rx, dst.wl 

7. Divide 2 Operand 4 
DIV{F,D,G,H}2 divr.rx, quo.mx 

8. Divide 3 Operand 4 
DIV{F,D,G,H}3 divr.rx, divd.rx, quo.wx 

9. Extended Modulus 4 


EMOD{F,D} mulr.rx, mulrx.rb, muld.rx, int.wl, fract.wx 
EMOD{G,H} mulr.rx, mulrx.rw, muld.rx, int.wl, fract.wx 


18. Move Negated 4 
MNEG{F,D,G,H} src.rx, dst.wx 


ll. Move 4 
MOV{F,D,G,H} src.rx, dst.wx 


12. Multiply 2 Operand 4 
MUL{F,D,G,H}2 mulr.rx, prod.mx 


13. Multiply 3 Operand 4 
MUL{F,D,G,H}3 mulr.rx, muld.rx, prod.wx 


14. Polynomial Evaluation F_ floating 1 
POLYF arg.rf, degree.rw, tbladdr.ab, {R9-3.wl} 
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15. Polynomial Evaluation D floating 
POLYD arg.rd, degree.rw, tbladdr.ab, {R@-5.wl} 


16. Polynomial Evaluation G floating 
POLYG arg.rg, degree.rw, tbladdr.ab, {R#-5.wl} 


17. Polynomial Evaluation H_ floating 
POLYH arg.rh, degree.rw, tbladdr.ab, 
{RO-5.wl,-16 (SP) :-1 (SP) .wb} 


18. Subtract 2 Operand 
SUB{F,D,G,H}2 sub.rx, dif.mx 


19. Subtract 3 Operand 
SUB{F,D,G,H}3 sub.rx, min.rx, dif.wx 


20. Test 
TST{F,D,G,H} srce.rx 


The following floating point instructions are described in 
on Control Instructions. 


1. Add Compare and Branch 
ACB{F,D,G,H} limit.rx, add.rx, index.mx, displ.bw 
Compare is LE on poSitive add, GE on negative 
add. 
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ADD Add 

Format: 
opcode add.rx, sum.mx 2 operand 
opcode addl.rx, add2.rx, Sum.wx 3 operand 


Operation: 

sum <- sum + add; !2 operand 

sum <- addl + add2; !3 operand 
Condition Codes: 

N <- sum LSS @; 

Z <- sum EQL @; 

V <- {floating overflow}; 

C <- @; 


Exceptions: 


Floating overflow 
floating underflow 
reserved operand 


Opcodes: 
4G ADDF2 Add F floating 2 Operand 
4l ADDF3 Add F_ floating 3 Operand 
68 ADDD2 Add D floating 2 Operand 
61 ADDD3 Add D_ floating 3 Operand 
49FD ADDG2 ADD G floating 2 Operand 
41FD ADDG3 ADD G floating 3 Operand 
68FD ADDH2 ADD H floating 2 Operand 
61FD ADDH3 ADD H floating 3 Operand 


Description: 


In 2 operand format, the addend operand is added to the sum operand and 
the sum operand is replaced by the rounded result. In 3 operand format, 
the addend 1 operand is added to the addend 2 operand and the-= sum 
operand is replaced by the rounded result. 

Notes: 


1. On a reserved operand fault, the sum operand is unaffected and 
the condition codes are UNPREDICTABLE. 


2. On floating underflow, if FU is set a fault occurs. zero is 
Stored as the result of floating underflow only if FU is clear. 
On a floating underflow fault, the sum operand is’ unaffected. 
If FU is clear, the sum operand is’ replaced by 8 and no 
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3. On floating overflow, the instruction faults; the sum operand 
is unaffected, and the condition codes are UNPREDICTABLE. 
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CLR Clear 
Format: 
opcode dst.wx 
Operation: 
dst <- @; 


Condition Codes: 


N <- @; 
Z<- 1; 
V <- @; 
CS 4C3 

Exceptions: 
none 

Opcodes: 

D4 CLRF Clear F floating 


7C CLRD Clear D floating, 
CLRG Clear G floating 
7CFD CLRH Clear H_floating 


Description: 


The destination operand is replaced by @. 
Notes: 


CLRx dst is equivalent to MOVx #98, dst, but is 5 (F floating) or 9 
(D floating or G_ floating) or 17 (H_ floating) bytes shorter. 
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CMP Compare 
Format: 

opcode srcl.rx, src2.rx 
Operation: 

srcl.= Sre2; 
Condition Codes: 


N <- srcecl LSS src2; 


Z <- srcecl EQL src2; 
V <- @; 
C <- @; 


Exceptions: 


reserved operand 


Opcodes: 
S1 CMPF Compare F floating 
71 CMPD Compare D floating 
S1FD CMPG Compare G_ floating 
71FD CMPH Compare H_ floating 


Description: 


The source 1 operand is compared with the source 2 
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action is to affect the condition codes. 


Notes: 
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On a reserved operand fault, the condition codes are UNPREDICTABLE. 
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CVT Convert 
Format: 

opcode src.rx, dst.wy 
Operation: 

dst <- conversion of src; 
Condition Codes: 


N <- dst LSS @; 
<- dst EQL @; 


Z 
V <- {sre cannot be represented in dst}; 
C 


<- @; 


Exceptions: 
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integer overflow 
floating overflow 
floating underflow 
reserved operand 


Opcodes: 
4c CVTBF Convert Byte to F floating 
6C CVTBD Convert Byte to D floating 
4CFD CVTBG Convert Byte to G floating 
6CFD CVTBH Convert Byte to H floating 
4D CVTWF Convert Word to F floating 
6D CVTWD Convert Word to D floating 
4DFD CVTWG Convert Word to G floating 
6DFD CVTWH Convert Word to H_floating 
4E CVTLF Convert Long to F floating 
6E CVTLD Convert Long to D_ floating 
4EFD CVTLG Convert Long to G floating 
6EFD CVTLH Convert Long to H floating 
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48 
68 
48FD 
68FD 


49 
69 
49FD 
69FD 


4A 
4B 
6A 
6B 
4AFD 
4BFD 
6AFD 
6BFD 


56 
99FD 
98FD 


76 
32FD 


33FD 
56FD 


FOFD 
F7FD 
76FD 
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CVTFB 
CVTDB 
CVTGB 
CVTHB 


CVTFW 
CVTDW 
CVTGW 
CVTHW 


CVTFL 


CVTRFL 


CVTDL 


CVTRDL 


CVTGL 


CVTRGL 


CVTHL 


CVTRHL 


CVTFD 
CVTFG 
CVTFH 


CVTDF 
CVTDH 


CVTGF 
CVTGH 


CVTHF 


CVTHD 
CVTHG 


Convert 
Convert 
Convert 
Convert 


Convert 
Convert 
Convert 
Convert 


Convert 
Convert 
Convert 


Convert 
Convert 
Convert 
Convert 


Convert 
Convert 
Convert 


Convert 
Convert 


Convert 
Convert 


Convert 


Convert 
Convert 
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F floating 
D floating 
G floating 
H floating 


F floating 
D_ floating 
G floating 
H floating 


F floating 


to Byte 
to Byte 
to Byte 
to Byte 


to Word 
to Word 
to Word 
to Word 


to Long 


Rounded F_ floating 
D floating to Long 
Convert Rounded D_ floating 


G floating 


to Long 


to Long 


to Long 


Rounded G floating to Long 
H floating to Long 


Rounded H_ floating 


F floating 
F floating 
F floating 


D_ floating 
D floating 


G floating 
G floating 


H floating 
H_ floating 
H_ floating 


to 
to 
to 


to 
to 


to 
to 


to 


to 
to 


D floating 
G floating 
H floating 


F floating 
H_ floating 


F floating 
H floating 


F floating 


D_ floating 
G floating 


to Long 
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FLOATING POINT INSTRUCTIONS 


Description: 


The source operand is converted to the 
operand and the destination operand is replaced by the result. 


2-Feb-81 


of the conversion is as follows: 


Notes: 


l. 


CVTBF 
CVTBD 
CVTBG 
CVTBH 
CVTWF 
CVTWD 
CVTWG 
CVTWH 
CVTLF 
CVTLD 
CVTLG 
CVTLH 


CVTFB 
CVTDB 
CVTGB 
CVTHB 
CVTFW 
CVTDW 
CVTGW 
CVTHW 
CVTFL 


CVTRFL 


CVTDL 


CVTRDL 


CVTGL 


CVTRGL 


CVTHL 


CVTRHL 


CVTFD 
CVTFG 
CVTFH 
CVTDF 
CVTDH 
CVTGF 
CVTGH 
CVTHF 
CVTHD 
CVTHG 


Only CVTDF, CVTGF, 


exact 
exact 
exact 
exact 
exact 
exact 
exact 
exact 
rounded 
exact 
exact 
exact 


truncated 
truncated 
truncated 
truncated 
truncated 
truncated 
truncated 
truncated 
truncated 
rounded 

truncated 
rounded 

truncated 
rounded 

truncated 
rounded 


exact 
exact 
exact 
rounded 
exact 
rounded 
exact 
rounded 
rounded 
rounded 


CVTHF, 


Floating overflow fault; 
and the condition codes are UNPREDICTABLE. 
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data type of the destination 
The form 


CVTHD, and CVTHG can result in 
the destination operand is unaffected 
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2s 


Only converts with a floating point Source operand can result 
in a reserved operand fault. On a reserved operand fault, the 
destination operand is unaffected and the condition codes’ are 
UNPREDICTABLE. 


Only converts with an integer destination operand can result in 
integer overflow. On integer overflow, the destination operand 
is replaced by the low order bits of the true result. 


Only CVTGF, CVTHF, CVTHD, and CVTHG can result in floating 
underflow. If FU is set a fault occurs. zero is stored as the 


result of floating underflow only if FU is clear. On a 
floating underflow fault, the destination operand is 
unaffected. If FU is clear, the destination operand is 


replaced by @ and no exception occurs. 
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DIV Divide 
Format: 
opcode divr.rx, quo.mx 2 operand 
opcode divr.rx, divd.rx, quo.wx 3 operand 
Operation: 
quo <- quo / divr; !2 operand 
quo <- divd / divr; !3 operand 


Condition Codes: 


N <- quo LSS @; 

Z <- quo EQL @; 

V <- {floating overflow} or {divr EQL 9}; 
C <- @;3 


Exceptions: 


floating overflow 
floating underflow 
divide by zero 
reserved operand 


Opcodes: 
46 DIVF2 Divide F floating 2 Operand 
47 DIVF3 Divide F floating 3 Operand 
66 DIVD2 Divide D floating 2 Operand 
67 DIVD3 Divide D_ floating 3 Operand 
46FD DIVG2 Divide G floating 2 Operand 
47FD DIVG3 Divide G_ floating 3 Operand 
66FD DIVH2 Divide H floating 2 Operand 
67FD DIVH3 Divide H floating 3 Operand 


Description: 


In 2 operand format, the quotient operand is divided by the divisor 
operand and the quotient operand is replaced by the rounded result. In 
3 operand format, the dividend operand is divided by the divisor operand 
ita the quotient operand is replaced by the rounded result. 

otes: 


1. On a reserved operand fault, the quotient operand is unaffected 
and the condition codes are UNPREDICTABLE. 
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2% 


On floating underflow, if FU is set a fault occurs. Zero is 
stored as the result of floating underflow only if FU is clear. 
On a floating underflow fault, the quotient operand is 
unaffected. If FU is clear, the quotient operand is replaced 
by ® and no exception occurs. 


On floating overflow, the instruction faults; the quotient 
operand is unaffected, and the condition codes are 
UNPREDICTABLE. 


On divide by zero, the quotient operand and condition codes are 
affected as in 3. above. 


Instructions 2-Feb-81 -- Rev 6.2 Page 4-132 
FLOATING POINT INSTRUCTIONS 


EMOD Extended Multiply and Integerize 


Format: 


EMODF and EMODD: 
opcode mulr.rx, mulrx.rb, muld.rx, int.wl, 
fract.wx 


EMODG and EMODH: 
opcode mulr.rx, mulrx.rw, muld.rx, int.wl, 
fract.wx 


Operation: 


int <- integer part of muld * {mulr'mulrx}; 
fract <- fractional part of muld * {mulr'mulrx}; 


Condition Codes: 


N <- fract LSS @; 
Z <- fract EQL @; 


V <- {integer overflow}; 
C <- @; 


Exceptions: 
integer overflow 


floating underflow 
reserved operand 


Opcodes: 
54 EMODF Extended Multiply and Integerize F floating 
74 EMODD Extended Multiply and Integerize D_ floating 


S4FD EMODG Extended Multiply and Integerize G floating 
74FD EMODH Extended Multiply and Integerize H floating 


Description: 


The multiplier extension operand is concatenated with the multiplier 
operand to gain 8 (EMODD and EMODF), 11 (EMODG), or 15 (EMODH) 
additional low order fraction bits. The low order 5 or 1 bits of the 
16-bit multiplier extension operand are ignored by the EMODG and EMODH 
instructions respectively. The multiplicand operand is multiplied by 
the extended multiplier operand. The multiplication is such that the 
result is equivalent to the exact product truncated (before 
normalization) to a fraction field of 32 bits in F floating, 64 bits in 
D floating and G floating, and 128 in H floating. Regarding the result 
as the sum of an integer and fraction of the same sign, the integer 


Instructions 2-Feb-81 -- Rev 6.2 Page 4-133 
FLOATING POINT INSTRUCTIONS 


operand 
operand 
Notes: 


Lé 


is replaced by the integer part of the result and the fraction 
is replaced by the rounded fractional part of the result. 


On a reserved operand fault, the integer operand and the 
fraction operand are unaffected. The condition codes are 
UNPREDICTABLE. 


On floating underflow, if FU is set a fault occurs. The 
integer and fraction parts are replaced by zero on the 
occurrence of floating underflow only if FU is clear. On a 
floating underflow fault, the integer and fraction parts are 
unaffected. If FU is clear, the integer and fraction parts are 
replaced by @ and no exception occurs. 


On integer overflow, the integer operand is replaced by the Jow 
order bits of the true result. 


Floating overflow is indicated by integer overflow; however 
integer overflow is possible in the absence of floating 
overflow. 


The signs of the integer and fraction are the same unless 
integer overflow results. 


Because the fraction part is rounded after separation of the 
integer part, it is possible that the value of the fraction 
operand is l. 


Instructions 
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MNEG 


Format: 


Move Negated 


opcode src.rx, dst.wx 


Operation: 


dst <- -src; 


Condition Codes: 
N <- dst LSS @; 
Z <- dst EQL Q@; 
V <- @; 
C <- @; 
Exceptions: 
reserved operand 
Opcodes: 
52 MNEGF Move Negated F floating 
72 MNEGD Move Negated D floating 
52FD MNEGG Move Negated G floating 
72FD MNEGH Move Negated H_ floating 


Description: 


The destination operand is replaced by _ the 


operand. 
Notes: 


On a reserved operand fault, 


the condition codes are UNPREDICTABLE. 


negative 


the destination operand is 


of 


Page 4-134 


the 


source 


unaffected and 
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MOV 


Format: 


Move 


opcode src.rx, dst.wx 


Operation: 


dst <- sre; 


Condition Codes: 


N <- dst LSS @; 
Z <- dst EQL @; 
V <- @; 
C <= C; 
Exceptions: 
reserved operand 
Opcodes: 
58 MOVF Move F floating 
70 MOVD Move D_floating 
S@FD MOVG Move G floating 
7@FD MOVH Move H_floating 


Description: 


The destination operand is replaced by the source operand. 


Notes: 


On a reserved operand fault, the destination operand is 
the condition codes are UNPREDICTABLE. 


Rev 6.2 
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unaffected and 


Instructions 


2-Feb-81 -- Rev 6.2 
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MUL 


Format: 


Multiply 


opcode mulr.rx, 


opcode mulr.rx, muld.rx, 


Operation: 


prod <- prod * mulr; 


prod <- muld * mulr; 


Condition Codes: 


N <- 
Z <- 
V<- 
C..<= 


Exceptions: 


prod LSS @; 
prod EQL @; 


prod.mx 


{floating overflow}; 


O; 


Floating overflow 
floating underflow 


reserved operand 


Opcodes: 
44 MULF2 
45 MULF3 
64 MULDZ 


65 MULD3 
44FD MULG2 
45FD MULG3 
64FD MULH2 
65FD MULH3 


Description: 


In 2 operand 


Notes: 


1. On a reserved operand fault, 


Multiply 
Multiply 
Multiply 
Multiply 
Multiply 
Multiply 
Multiply 
Multiply 


F floating 
F floating 
D floating 
D_ floating 
G floating 
G_ floating 
H floating 
H_ floating 


WN WN WD W DY 


prod.wx 


!2 operand 


!3 operand 


Operand 
Operand 
Operand 
Operand 
Operand 
Operand 
Operand 
Operand 


2 operand 


3 operand 


Page 4-136 


format, the product operand is multiplied by the multiplier 
operand and the product operand is replaced by the rounded result. In 3 
operand format, the multiplicand operand is multiplied by the multiplier 
operand and the product operand is replaced by the rounded result. 


the product operand is 


and the condition codes are UNPREDICTABLE. 


unaffected 
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2. 


On floating underflow, if FU is set a fault occurs. Zero is 
stored as the result of floating underflow only if FU is clear. 
On a floating underflow fault, the product operand is 
unaffected. If FU is clear, the product operand is replaced by 
® and no exception occurs. 


On floating overflow, the instruction faults; the product 
operand is unaffected, and the condition codes are 
UNPREDICTABLE. 
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POLY Polynomial Evaluation 
Format: 
opcode arg.rx, degree.rw, tbladdr.ab 


Operation: 


tmpl <- degree; 
if tmpl GTRU 31 then RESERVED OPERAND FAULT; 
tmp2 <- tbladdr; ; 
tmp3 <- {(tmp2)+}; !tmp3 accumulates the partial result 
!tmp3 is of type x 
if POLYH then -(SP) <- arg; 
while tmpl GTRU 0 do 
begin !computation loop 
tmp4 <- {arg * tmp3}; !tmp4 accumulates new partial result. 
!tmp3 has old partial result. 
!Perform multiply, and retain the 31 (POLYF), 
163 (POLYD, POLYG), or 127 (POLYH) most significant 
!Ibits of the fraction by truncating the unnormalized 
!product. (The most significant bit of the 3l, 63, 
lor 127 bits in the product magnitude will be zero 
!if the product magnitude is LSS 1/2 and GEQ 1/4.) 
!Use the result in the following add operation. 
tmp4 <- tmp4 + (tmp2); 
!Inormalize, and round to type x. 
!'Check for over/underflow only after the combined 
Imultiply/add/normalize/round sequence. 
if OVERFLOW then FLOATING OVERFLOW FAULT 
if UNDERFLOW then 


begin 

if FU EQL 1 then FLOATING UNDERFLOW FAULT; 
tmp4 <- 0; !force result to 0; 

end; 


tmpl <- tmpl - 1; 
tmp2 <- tmp2 + {size of data type}; 
tmp3 <- tmp4; !update partial result in tmp3 


end; 
if POLYF then 
begin 
RO <- tmp3; 
Rl <- 0; 
R2 <- 0; 
R3 <- tmp2; 
end; 
if POLYD or POLYG then 
begin 
R1L'RO <- tmp3; 
R2 <- 0; 


R3 <- tmp2; 
R4 <- 0; 
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R5 <- @ 
end; 

if POLYH then 
begin 
SP <- SP + 16; 
R3'R2'R1'RO <- tmp3; 


me 


R4 <- @; 
R5 <- tmp2; 
end; 


Condition Codes: 


N <- R@ LSS @; 

Z <- RO EQL @; 

V <- {floating overflow}; 
C <= @; 


Exceptions: 
floating overflow 


floating underflow 
reserved operand 


Opcodes: 
55 POLYF Polynomial Evaluation F floating 
75 POLYD Polynomial Evaluation D floating 


S5FD POLYG Polynomial Evaluation G floating 
75FD POLYH Polynomial Evaluation H_ floating 


Description: 


The table address operand points to a table of polynomial coefficients. 
The coefficient of the highest order term of the polynomial is pointed 
to by the table address operand. The table is specified with lower 
order coefficients stored at increaSing addresses. The data type of the 
coefficients is the same as the data type of the argument operand. The 
evaluation iS carried out by Horner's method and the contents of R@ 
(R1'R@ for POLYD and POLYG, R3'R2'R1'R@ for POLYH)) are replaced by the 
result. The result computed is: 

if d = degree 

and xX = arg 

result = C({@] + x*(C[1] + x*(C[2] + ... x*C[d])) 


The unsigned word degree operand specifies the highest numbered 
coefficient to participate in the evaluation. POLYH requires four 
longwords on the stack to Store arg in case the instruction is 
interrupted. 

Notes: 
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l. After execution: 


POLYF 

R@ = result 

Rl = @ 

R2 = @ 

R3 = table address + degree*4 + 4 


POLYD and POLYG 


R®@ = high order part of result 

Rl = low order part of result 

R2 = @ 

R3 = table address + degree*8 + 8 

R4 = @ 

R5 = g 

POLYH 

R®@ = highest order part of result 

Rl = second highest order part of result 
R2 = second lowest order part of result 
R3 = lowest order part of result 

R4 = @ 

R5 = table address + degree*1l6 + 16 


2. Ona floating fault: 


1. If PSL<FPD> = @, the instruction faults and all relevant 
Side effects are restored to their original state. 


2. If PSL<FPD> = 1, the instruction is suspended and state is 
saved in the general registers as follows: 


POLYF 

R@ = tmp3 !partial result after iteration prior to the 
!one cauSing the overflow/underflow 

Rl = arg 

R2<7:09> = tmpl Inumber of iterations remaining 

R2<31:8> = implementation specific 

R3 = tmp2 !points to table entry causing exception 


POLYD and POLYG 


R1L'RO = tmp3 !partial result after iteration prior to 
'the one causing the overflow/underflow 


R2<7:9> = tmpl !number of iterations remaining 
R2<31:8> = implementation specific 

R3 = tmp2 !points to table entry causing exception 
R5'R4 = arg 


POLYH 

R3'R2'R1'RO = tmp3 !partial result after iteration prior to 
!'the one causing the overflow/underflow 

R4<7:9> = tmpl Inumber of iterations remaining 

R4<31:8> = implementation specific 

R5 = tmp2 !points to table entry causing exception 
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arg is saved on the stack in use during the faulting 


instruction. 


Example: 


Implementation specific information is saved to allow the 
instruction to continue after possible scaling of the 
coefficients and partial result by a fault handler. 


If the unsigned word degree operand is ®@ and the argument is 
not a reserved operand, the result is C[@]. 


If the unsigned word degree operand iS greater than 31, a 
reserved operand fault occurs. 


On a reserved operand fault: 


1. if PSL<FPD> = 9, the reserved operand is either the degree 
operand (greater than 31), or the argument operand, or some 
coefficient. 


2. if PSL<FPD> = 1, the reserved operand is a coefficient, and 
R3 (except for POLYH) or R5 (for POLYH) is pointing at the 
value which caused the exception. 


3. The state of the saved condition codes and the other 
registers is UNPREDICTABLE. If the reserved operand is 
changed and the contents of the condition codes and all 
registers are preserved, the fault is continuable. 


On floating underflow after the rounding operation at any 
iteration of the computation loop, a fault occurs if FU is set. 
If FU is clear, the temporary result (tmp3) is replaced by zero 
and the operation continues. In this case the final result may 
be non zero if underflow occurred before the last iteration. 


On floating overflow after the rounding operation at any 
iteration of the computation loop, the instruction terminates 
with a fault. 


If the argument is zero and one of the coefficients in the 
table is the reserved operand, whether a reserved operand fault 
occurs is UNPREDICTABLE. 


For POLYH, some implementations may not Save arg on the_ stack 
until after an interrupt or fault occurs. However, arg will 
always be on the stack if an interrupt or floating fault occurs 
after FPD is set. If the four longwords on the stack overlap 
any of the source operands, the results are UNPREDICTABLE. 


To compute P(x) = CO + C1l*x + C2*x**2 


where C@ 


= 1.0, Cl = .5, and C2 = .25 


Instructions 
FLOATING POINT 


PTABLE: .FLOAT 


INSTRUCTIONS 


X,#2,PTABLE 


Mm AQ®Q 
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SUB 
Format: 


opcod 


e 


opcode 


Operation: 


dif < 


dif <- 
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INSTRUCTIONS 


Subtract 


Ssub.rx, dif.mx 


sub.rx, min.rx, 


Gif - sub; 


min —- sub; 


Condition Codes: 


N <- 
Z 
V <- 
C 


Exceptions: 


dif LSS @; 
dif EQL @; 
{floating overflow}; 


0; 


floating overflow 
floating underflow 


reserved operand 


Opcodes: 


42 SUBF2 
43 SUBF 3 
62 SUBD2 
63 SUBD3 
42FD SUBG2 
43FD SUBG3 
62FD SUBH2 
63FD SUBH3 


Description: 


In 2 operand format, 
difference operand and the difference 
In 3 operand format, the 
the difference 


Subtract 
Subtract 
Subtract 
Subtract 
Subtract 
Subtract 
Subtract 
Subtract 


minuend operand and 


result. 
Notes: 


l. On 


~ 


a 


reserved 


the 


dif.wx 


F floating 2 
F floating 3 
D floating 2 
D floating 3 
G floating 2 
G floating 3 
H floating 2 
H floating 3 

subtrahend 


subtrahend 


operand 


2 operand 


3 operand 


!2 operand 


!3 operand 


Operand 
Operand 
Operand 
Operand 
Operand 
Operand 
Operand 
Operand 


operand is subtracted from _ the 
is replaced by the rounded result. 
operand is subtracted from the 
operand is replaced by the rounded 


fault, the difference operand is 
unaffected and the condition codes are UNPREDICTABLE. 
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On floating underflow, if FU is set a fault occurs. zero is 
Stored as the result of floating underflow only if FU is clear. 
On a floating underflow fault, the difference operand is 
unaffected. If FU is clear, the difference operand is replaced 
by ®@ and no exception occurs. 


On floating overflow, the instruction faults; the difference 
operand is unaffected, and the condition codes are 
UNPREDICTABLE. 
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TST 


Format: 


Test 


opcode src.rx 


Operation: 


src - @; 


Condition Codes: 


N <- 
Z<- 
V <- 
C..<F 


Exceptions: 


src LSS @; 
src EQL @; 
B; 
QO; 


reserved operand 


Opcodes: 
53 TSTF 
73 TSTD 
53FD TSTG 
73FD TSTH 


Description: 


The condition codes are affected according to the value 


operand. 
Notes: 


l. TSTx sre is equivalent to CMPx src, #8, but is 
G floating) 


or 9 (D_ floating 
Shorter. 
2. On a_ereserved operand 


Test F floating 
Test D floating 
Test G floating 
Test H_ floating 


UNPREDICTABLE. 


Rev 6.2 


fault, the 


or 


condition 
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the source 


(F floating) 
(H_ floating) bytes 


codes are 
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4.10 CHARACTER STRING INSTRUCTIONS 
A character string is specified by 2 operands: 


1. An unsigned word operand which specifies the length of the 
character string in bytes. 


2. The address of the lowest addressed byte of the character 
String. This is specified by a byte operand of address access 
type. 


Each of the character string instructions uses general registers R@ 
through Rl, R@ through R3, or RY through R5 to contain a control block 
which maintains updated addresses and state during the execution of the 
instruction. At completion, these registers are available to software 
to use aS string specification operands for a subsequent instruction on 
a contiguous character string. During the execution of the 
instructions, pending interrupt conditions are tested and if any is 
found, the control block is updated, a first part done bit is set in the 
PSL, and the instruction interrupted (See Chapter 6). After the 
interruption, the instruction resumes transparently. The format of the 
control block is: 


+------------------------------- $------------------------------- + 
| | LENGTH 1 | : RO 
+-----------—--—-- -- -------------- $-—-------------- - - - - - - - - - - -- + 
| ADDRESS 1 li 8s RE 
+------------------------------- 4+------------------------------- + 
| | LENGTH 2 | : R2 
$—------------------------------- $------------------------------- + 
| ADDRESS 2 | : R3 
+--------—----------------------- $----------------------------- + 
| | LENGTH 3 | : R4 
+------------------------------- +------------------------------- + 
| ADDRESS 3 | : RS 
+—------—-—-—-—-------- -- - - + 


The fields LENGTH 1, LENGTH 2 (if required) and LENGTH 3 (if required) 
contain the number of bytes remaining to be processed in the first, 
second and third string operands respectively. The fields ADDRESS 1, 
ADDRESS 2 (if required) and ADDRESS 3 (if required) contain the address 
of the next byte to be processed in the first, second, and third string 
operands respectively. 


Memory access faults will not occur when a zero length string is 
specified because no memory reference occurs. 
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The following instructions are described in this section. 

Instructions 

1. Compare Characters 3 Operand 1 
CMPC3 len.rw, srcladdr.ab, src2addr.ab, {R9-3.wl} 

2. Compare Characters 5 Operand a 
CMPC5 srcllen.rw, srcladdr.ab, fill.rb, src2len.rw, 
src2addr.ab, {R@-3.wl} 

3. Locate Character 1 
LOCC char.rb, len.rw, addr.ab, {R@-l.wl} 

4. Match Characters 1 
MATCHC lenl.rw, addrl.ab, len2.rw, addr2.ab, {R#-3.wl} 

5. Move Character 3 Operand 1 
MOVC3 len.rw, srcaddr.ab, dstaddr.ab, {R9-5.wl} 

6. Move Character 5 operand 1 


MOVC5 srclen.rw, srcaddr.ab, fill.rb, dstlen.rw, dstaddr.ab, 


{RO-5.wl} 


7. Move Translated Characters 


1 


MOVTC srclen.rw, srcaddr.ab, fill.rb, tbladdr.ab, dstlen.rw, 


dstaddr.ab, {R@-5.wl} 


8. Move Translated Until Character 


1 


MOVTUC srclen.rw, srcaddr.ab, esc.rb, tbladdr.ab, dstlen,rw, 


dstaddr.ab, {R@-5.wl} 


9. Scan Characters 


SCANC len.rw, addr.ab, tbladdr.ab, mask.rb, {R@-3.wl} 


1@. Skip Character 
SKPC char.rb, len.rw, addr.ab, {R9-l.wl} 


ll. Span Characters 


SPANC len.rw, addr.ab, tbladdr.ab, mask.rb, {R9-3.wl} 
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CMPC Compare Characters 
Format: 
opcode len.rw, srcladdr.ab, src2addr.ab 3 operand 


opcode srcllen.rw, srcladdr.ab, fill.rb, 
src2len.rw, src2addr.ab 5 operand 


Operation: 


tmpl <- len; !3 operand 
tmp2 <- srcladdr; 


tmp3 <- src2addr; 
if tmpl EQL @ then; !Condition Codes affected on tmpl EQL @ 
if tmpl GTRU @ then 

begin 


while {tmpl NEQU @} do 
if (tmp2) EQL (tmp3) then 
!'Condition Codes affected on ((tmp2) EQL (tmp3)) 


begin 

tmpl <- tmpl - 1; 
tmp2 <- tmp2 + 1; 
tmp3 <- tmp3 + 1; 
end; 


else exit while loop; 


tmpl <- srcllen; 15 operand 
tmp2 <- srcladdr; 

tmp3 <- src2len; 

tmp4 <- src2addr; 


if {tmpl EQL @} AND {tmp3 EQL 6} then; 
!'Condition codes affected on {tmpl EQL @} AND {tmp3 EQL Q} 


while {tmpl NEQU @} AND {tmp3 NEQU @} do 
if (tmp2) EQL (tmp4) then 


!Condition Codes affected on ((tmp2) EQL (tmp4)) 
begin 
tmpl <- tmpl - 1; 
tmp2 <- tmp2 + 1; 
tmp3 <- tmp3 - 1; 
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tmp4 <- tmp4 + 1; 
end; 


else exit while loop; 
if NOT{tmpl NEQU @} AND {tmp3 NEQU 6} then 
begin 


while {tmp1 NEQU ®} AND {(tmp2) EQL £i11} do 
!Condition Codes affected on ((tmp2) EQL fill) 
begin 
tmpl <- tmpl - 1; 
tmp2 <- tmp2 + 1; 
end; 


while {tmp3 NEQU 0} AND {fill EQL (tmp4)} do 


!Condition Codes affected on (f1i11 EQL (tmp4)) 
begin 
tmp3 <- tmp3 - 1; 
tmp4 <- tmp4 + 1; 
end; 


end; 


R@ <- tmpl; 
Rl <- tmp2; 
R2 <- tmp3; 
R3 <- tmp4; 


Condition Codes: 


!Final Condition Codes reflect last affecting 
!of Condition Codes in Operation above. 

N <- {first byte} LSS {second byte}; 

Z <- {first byte} EQL {second byte}; 

V <- @; 

C <- {first byte} LSSU {second byte}; 


Exceptions: 


none 
Opcodes: 
29 CMPC3 Compare Characters 3 Operand 
2D CMPC5 Compare Characters 5 Operand 


Description: 


In 3 operand format, the bytes of string 1 specified by the length and 
address 1 operands are compared with the bytes of string 2 specified by 
the length and address 2 operands. Comparison proceeds until inequality 
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is detected or all the bytes of the strings have been examined. 
Condition codes are affected by the result of the last byte comparison. 
In 5 operand format, the bytes of the string 1 specified by the length 1 
and address 1 operands are compared with the bytes of the string 2 
specified by the length 2 and address 2 operands. If one string is 
longer than the other, the shorter string is conceptually extended to 
the length of the longer by appending (at higher addresses) bytes equal 
to the fill operand. Comparison proceeds until inequality is detected 
or all the bytes of the strings have been examined. Condition codes are 
affected by the result of the last byte comparison. For either CMPC3 or 
CMPC5 two zero length strings compare equal (i.e. 2Z is set and N, V, 
and C are cleared). 


Notes: 
l. After execution of CMPC3: 


R@ = number of bytes remaining in string 1 (including 
byte which terminated comparison); 
R@ is zero only if strings are equal 


Rl = address of the byte in string 1 which terminated 
comparison; if strings are equal, address of one 
byte beyond string l 


R2 = R@ 


R3 = address of the byte in string 2 which terminated 
comparison; if strings are equal, address of 
one byte beyond string 2. 


2. After execution of CMPC5: 


R®@ = number of bytes remaining in string 1 (including 
byte which terminated comparison); R®@ is zero only 
if string 1 and string 2 are of equal length and 
equal or string 1 was exhausted before comparison 
terminated 


Rl = address of the byte in string 1 which terminated 
comparison; if comparison did not terminate 
before string 1 exhausted, address of one byte 
beyond string l 


R2 = number of bytes remaining in string 2 (including 
byte which terminated comparison); R2 is zero 
only if string 2 and string 1 are of equal length 
or string 2 was exhausted before comparison terminated 


R3 = address of the byte in string 2 which terminated 
comparison; if comparison did not terminate before 


string 2 was exhausted, address of one byte beyond 
String 2. 
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3. If both strings have zero length, condition code Z is set and 
N, V, and C are cleared just as in the case of two equal 
strings. 
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LOCC Locate Character 
Format: 


opcode char.rb, len.rw, addr.ab 
Operation: 


tmpl <- len; 

tmp2 <- addr; 

if tmpl GTRU @ then 
begin 

while {tmpl NEQ @} AND {(tmp2) NEQ char} do 
begin 
tmpl <- tmpl - 1; 
tmp2 <- tmp2 + 1; 
end; 
end; 

R@ <- tmpl; 

Rl <- tmp2; 


Condition Codes: 


N <- @; 
Z <- RO EQL @; 
V <- @;3 
C <- @; 

Exceptions: 
none 

Opcodes: 

3A LOCC Locate Character 


Description: 
The character operand is compared with the bytes of the string specified 


by the length and address operands. Comparison continues until equality 


is detected or all bytes of the string have been compared. If equality 
is detected; the condition code Z-bit is cleared; otherwise the Z-bit 
is set. 


Notes: 
l. After execution: 


R@ = number of bytes remaining in the string (including 
located one) if byte located; otherwise @ 


Rl = address of the byte located if byte located; otherwise 
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address of one byte beyond the String. 


2. If the string has zero length, condition code Z is set just as 
though each byte of the entire string were unequal to 
character. 
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MATCHC Match Characters 
Format: 

opcode objlen.rw, objaddr.ab, srclen.rw, srcaddr.ab 
Operation: 

tmpl <- objlen; 

tmp2 <- objaddr; 

tmp3 <- srclen; 

tmp4 <- srcaddr; 

tmp5 <- tmpl; 


while {tmpl NEQU @} AND {tmp3 GEQU tmpl} do 


begin 
if (tmp2) EQL (tmp4) then 
begin 
tmpl <- tmpl - 1; 
tmp2 <- tmp2 + 1; 
tmp3 <- tmp3 - 1; 
tmp4 <- tmp4 + 1; 
end 
else 
begin 
tmp2 <- tmp2 - ZEXT (tmp5-tmpl); 
tmp3 <- {tmp3 - 1} + {tmp5-tmp1}; 
tmp4 <- {tmp4 + 1} - ZEXT (tmp5-tmp1) ; 
tmpl <- tmp5; 
end; 
end; 


if {tmp3 LSSU tmpl} then 


begin 

tmp4 <- tmp4 + tmp3; 
tmp3 <- @; 

end; 


R@ <- tmpl; 
Rl <- tmp2; 
R2 <- tmp3; 
R3 <- tmp4; 


Condition Codes: 


N <- @; 
Z <- RO EQL @; Imatch found 
V <- @;3 
C <- @; 


Exceptions: 


none 


Instructions 12-Feb-82 -- Rev 7 Page 4-155 
CHARACTER STRING INSTRUCTIONS 


Opcodes: 


39 MATCHC Match Characters 


Description: 


The source string specified by the source length and source address 
operands is searched for a substring which matches the object string 
specified by the object length and object address operands. If the 
substring is found, the condition code Z-bit is set; otherwise, it is 
cleared. 


Notes: 
l. After execution: 


R@ = if a match occurred @; otherwise the number of 
bytes in the object string. 


Rl = 1£ a match occurred, the address of one byte beyond 
the object string i.e. objaddr + objlen; otherwise 
the address of the object string. 


R2 = if a match occurred, the number of bytes remaining in 
the source string; otherwise @. 


R3 = if a match occurred, the address of 1 byte beyond 
the last byte matched; otherwise the address of 1 
byte beyond the source string i.e. srcaddr + srclen. 


For zero length source and object strings, R3 and Rl _ contain 
the source and object addresses respectively. 


2. If both strings have zero length or if the object string has 
zero length, condition code Z is set and registers R@-R3 are 
left just as though the substring were found. 


3. If the source string has zero length and the object string has 
non-zero length, condition code Z is cleared and registers 
R@-R3 are left just as though the substring were not found. 
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MOVC Move Character 
Format: 
opcode len.rw, srcaddr.ab, dstaddr.ab 3 operand 
opcode srclen.rw, srcaddr.ab, fill.rb, 
dstlen.rw, dstaddr.ab 5 operand 
Operation: 
tmpl <- len; 13 operand 


tmp2 <- srcaddr; 
tmp3 <- dstaddr; 
if tmp2 GTRU tmp3 then 
begin 
while tmpl NEQU @ do 
begin 
(tmp3) <- (tmp2); 
tmpl <- tmpl - 1; 
tmp2 <- tmp2 + 1; 
tmp3 <- tmp3 + 1; 
end; 
Rl <- tmp2; 
R3 <- tmp3; 


end 
else 
begin 
tmp4 <- tmpl; 
tmp2 <- tmp2 + ZEXT(tmpl); 
tmp3 <- tmp3 + ZEXT(tmpl); 
while tmpl NEQU @ do 
begin 
tmpl <- tmpl - 1; 
tmp2 <- tmp2 - 1; 
tmp3 <- tmp3 - 1; 
(tmp3) <- (tmp2); 
end; 
Rl <- tmp2 + ZEXT(tmp4); 
R3 <- tmp3 + ZEXT(tmp4) ; 
end; 
RO <- @; 
R2 <- @; 
R4 <- @; 
R5 <- @; 
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tmpl <- srclen; 15 operand 
tmp2 <- srcaddr; 

tmp3 <- dstlen; 

tmp4 <- dstaddr; 

if tmp2 GTRU tmp4 then 


begin 

while {tmpl NEQU @} AND {tmp3 NEQU @} do 
begin 
(tmp4) <- (tmp2); 
tmpl <- tmpl - 1; 
tmp2 <- tmp2 + 1; 
tmp3 <- tmp3 - 1; 
tmp4 <- tmp4 + 1; 
end; 

while tmp3 NEQU @ do 
begin 


(tmp4) <- fill; 
tmp3 <- tmp3 - 1; 
tmp4 <- tmp4 + 1; 
end; 

Rl <- tmp2; 

R3 <- tmp4; 


end 
else 
begin 
tmp5 <- MINU(tmpl, tmp3); 
tmp6 <- tmp3; 
tmp2 <- tmp2 + ZEXT(tmp5); 
tmp4 <- tmp4 + ZEXT(tmp6) ; 
while tmp3 GTRU tmpl do 
begin 
tmp3 <- tmp3 - 1; 
tmp4 <- tmp4 - 1; 
(tmp4) <- £111; 
end; 
while tmp3 NEQU @ do 
begin 
tmpl <- tmpl - 1; 
tmp2 <- tmp2 - 1; 
tmp3 <- tmp3 - 1; 
tmp4 <- tmp4 - 1; 
(tmp4) <- (tmp2); 
end; 
Rl <- tmp2 + ZEXT (tmp5); 
R3 <- tmp4 + ZEXT (tmp6); 
end; 
R@ <- tmpl; 
R2 <- @;3 
R4 <- @;3 


R5 <- @; 
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Condition Codes: 


<- @ 
<4 
<- @ 
<- 0 


!MOVC 3 


<- srclen LSS dstlen; !MOVC5 
<- srclen EQL dstlen; 

<- @; 

<- srclen LSSU dstlen; 


QASN 2 QAAN Z 


Exceptions: 


none 
Opcodes: 
28 MOVC3 Move Character 3 Operand 
2C MOVC5 Move Character 5 Operand 


Description: 


In 3 operand format, the destination string specified by the length and 
destination address operands is replaced by the source string specified 
by the length and source address operands. In 5 operand format, the 
destination string specified by the destination length and destination 
address operands is replaced by the source string specified by the 
source length and source address operands. If the destination string is 
longer than the source string, the highest addressed bytes of the 
destination are replaced by the fill operand. If the destination string 
is shorter than the source string, the highest addressed bytes of the 
source string are not moved. The operation of the instruction is Such 
that overlap of the source and destination strings does not affect the 
result. 
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Notes: 


1. 


26 


After execution of MOVC3: 


RG = @ 

Rl = address of one byte beyond the source string 

R2 = @ 

R3 = address of one byte beyond the destination string. 
R4 = @ 

R5 = Q 


After execution of MOVCS: 


R@ = number of unmoved bytes remaining in source string. 
R@ is non-zero only if Source String is longer 
than destination string 


Rl = address of one byte beyond the last byte 
in source string that was moved 


R2 = @ 
R3 = address of one byte beyond the destination string. 
R4 = @ 
R5 = @ 


MOVC3 is the preferred way to copy one block of memory 
another. 


MOVCS with a @ source length operand is the preferred way 
fill 


a block of memory with the fill character. 


to 


to 


Instructions 


MOVTC 
Formats: 


opcode 


Operation: 


tmpl <- 
tmp2 <- 
tmp3 <- 
tmp4 <- 
if tmp2 


else 
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Move Translated Characters 


srclen.rw, srcaddr.ab, 


dstlen.rw, dstaddr.ab 


srclen; 
srcaddr; 
dstlen; 
dstaddr; 

GTRU tmp4 then 
begin 


Fill.rb, tbladdr.ab, 


while {tmpl NEQU 8} AND {tmp3 NEQU @} 


begin 


(tmp4) <- 


(tbladdr + ZEXT((tmp2))); 


tmpl <- tmpl - 1; 
tmp2 <- tmp2 + 1; 
tmp3 <- tmp3 - 1; 
tmp4 <- tmp4 + 1; 


end; 


while {tmp3 NEQU 6} do 


begin 


(tmp4) <- fill; 


tmp3 <- tmp3 - 1; 
tmp4 <- tmp4 + 1; 


end; 
Rl <- tmp2; 
R5 <- tmp4; 
end; 
begin 


tmp5 <- MINU(tmpl,tmp3); 


tmp6 <- tmp3; 


tmp2 <- tmp2 + ZEXT(tmp5) 
tmp4 <- tmp4 + ZEXT(tmp6) 
while tmp3 GTRU tmpl do 


begin 


me 


me 


tmp3 <- tmp3 - 1; 
tmp4 <- tmp4 - 1; 


(tmp4) <- £i11; 


end; 
while tmp3 NEQU 
begin 
tmpl <- 
tmp2 <- 
tmp3 <- 
tmp4 <- 


(tmp4) <- 


end; 


0 do 


tmpl 
tmp2 
tmp3 
tmp 4 


(tbla 


[oY ell ool ee oe 


dr + ZEXT((tmp2))); 


Rl <- tmp2 + ZEXT(tmp5); 
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R5 <- tmp4 + ZEXT(tmp6); 


end; 
R®@ <- tmpl; 
R2 <- @; 
R3 <- tbladdr; 
R4 <- @; 


Condition Codes: 


N <- srclen LSS dstlen; 
Z <- srclen EQL dstlen; 
V <- @; 

C <- srclen LSSU dstlen; 


Exceptions: 
none 
Opcodes: 


2E MOVTC Move Translated Characters 


Description: 


The source string specified by the source length and source address 
operands is translated and replaces the destination string specified by 
the destination length and destination address operands. Translation is 
accomplished by using each byte of the Source string as an index into a 
256 byte table whose zeroth entry address is specified by the table 
address operand. The byte selected replaces the byte of the destination 
String. If the destination string is longer than the source string, the 
highest addressed bytes of the destination string are replaced by the 
fill operand. If the destination string is shorter than the _ source 
String, the highest addressed bytes of the source string are not 
translated and moved. The operation of the instruction is’ such that 
overlap of the source and destination strings does not affect the 
result. If the destination string overlaps the translation table, the 
destination string is UNPREDICTABLE, 


Notes: 
After execution: 
R@ = number of untranslated bytes remaining in source string; 
R® is non-zero only if source string is longer than 


destination string 


Rl = address of one byte beyond the last byte in 
source string that was translated 


R2 = 9 


R3 = address of the translation table. 
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R4 4) 


R5 


address of one byte beyond the destination 
String. 
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MOVTUC Move Translated Until Character 


Format: 


opcode srclen.rw, srcaddr.ab, esc.rb, tbladdr.ab, 
dstaddr.ab 


Operation: 


tmpl <- srclen; 
tmp2 <- srcaddr; 
tmp3 <- dstlen; 
tmp4 <- dstaddr; 


if tmpl GTRU @ and tmp3 GTRU @ then 
begin 


while {tmpl NEQU @} AND {tmp3 NEQU 0} do 
if{(tbladdr + ZEXT(tmp2)) NEQU esc} then 


begin 

(tmp4) <- (tbladdr + ZEXT(tmp2)); 
tmpl <- tmpl - 1; 

tmp2 <- tmp2 + 1; 

tmp3 <- tmp3 - 1; 

tmp4 <- tmp4 + 1; 

end; 


else exit while loop; 


R@ <- tmpl; 

Rl <- tmp2; 

R2 <- @; 

R3 <- tbladdr; 
R4 <- tmp3; 

R5 <- tmp4; 


Condition Codes: 
N <- srclen LSS dstlen; 
Z <- srclen EQL dstlen; 
V <- {terminated by escape}; 
C <- srclen LSSU dstlen; 
Exceptions: 
none 


Opcodes: 


2F MOVTUC Move Translated Until Character 
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Description: 


The Source string specified by the source length and source address 
operands is translated and replaces the destination string specified by 
the destination length and destination address operands. Translation is 
accomplished by using each byte of the Source string as index into a 256 
byte table whose zeroth entry address is specified by the table address 
operand. The byte selected replaces the byte of the destination string. 
Translation continues until a translated byte is equal to the escape 
byte or until the source string or destination string is exhausted. If 
translation is terminated because of escape the condition code V-bit is 
set; otherwise it is cleared. If the destination string overlaps the 
table, the destination string and registers R® through R5 are 
UNPREDICTABLE. If the source and destination strings overlap and their 
addresses are not identical, the destination string and registers RQ 
through R5 are UNPREDICTABLE. If the source and destination string 
addresses are identical, the translation is performed correctly. 


Notes: 
After execution: 


R@ = number of bytes remaining in source string (including 
the byte which caused the escape). R@ is zero only 
if the entire source string was translated and 
moved without escape 


Rl = address of the byte which resulted in destination 
string exhaustion or escape; or if no exhaustion or 
escape, address of one byte beyond the source string 


4 


R2 
R3 = address of the table 
R4 = number of bytes remaining in the destination string 


R5 = address of the byte in the destination string 
which would have received the translated byte 
which caused the escape or would have received a 
translated byte if the source string were not exhausted; 
or if no exhaustion or escape, the address of one byte 
beyond the destination string. 


Instructions 12-Feb-82 -- Rev 7 Page 4-165 
CHARACTER STRING INSTRUCTIONS 


SCANC Scan Characters 
Format: 

opcode len.rw, addr.ab, tbladdr.ab, mask.rb 
Operation: 


tmpl <- len; 

tmp2 <- addr; 

if tmpl GTRU @ then 
begin 

while {tmpl NEQU @} AND 
{{(tbladdr + ZEXT((tmp2))) AND mask} EQL @} do 
begin 
tmpl <- tmpl - 1; 
tmp2 <- tmp2 + 1; 
end; 
end; 

R®@ <- tmpl; 

Rl <- tmp2; 

R2 <- @; 

R3 <- tbhladdr; 


Condition Codes: 


N <- @; 
Z <- RO EQL @; 
V <- @; 
C <- @; 


Exceptions: 
none 
Opcodes: 


2A SCANC Scan Characters 


Description: 


The bytes of the string specified by the length and address operands are 
succesSively used to index into a 256 byte table whose zeroth entry 
address is specified by the table address operand. The byte selected 
from the table is ANDed with the mask operand. The operation continues 
until the result of the AND is non-zero or all the bytes of the string 
have been exhausted. If a non-zero AND result is detected, the 
condition code Z-bit is cleared; otherwise, the Z-bit is set. 


Instructions 12-Feb-82 -- Rev 7 Page 4-166 
CHARACTER STRING INSTRUCTIONS 


Notes: 


1. After execution: 


R@ = number of bytes remaining in the string (including 
the byte which produced the non-zero AND result) 
R®@ is zero only if there was no non-zero AND result. 


Rl = address of the byte which produced non-zero 
AND result; or, if no non-zero result, address 
of one byte beyond the string 


R2 = @ 


R3 address of the table 


2. If the string has zero length, condition code Z is set just as 
though the entire string were scanned. 
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SKPC Skip Character 
Format: 

opcode char.rb, len.rw, addr.ab 
Operation: 


tmpl <- len; 

tmp2 <- addr; 

if tmpl GTRU @ then 
begin 

while {tmpl NEQ @} AND {(tmp2) EQL char} do 
begin 
tmpl <- tmpl - 1; 
tmp2 <- tmp2 + 1; 
end; 
end; 

R@ <- tmpl; 

Rl <- tmp2; 


Condition Codes: 


N <- 


4) 
Z <- RO EQL @ 

4) 

4) 


=e 


V <- 
C. <= 


me m~e Q ™—e 


Exceptions: 
none 
Opcodes: 


3B SKPC Skip Character 


Description: 


The character operand is compared with the bytes of the string specified 


by the length and address_ operands. Comparison continues) until 
inequality is detected or all bytes of the string have been compared. 
If inequality is detected; the condition code Z-bit is cleared; 


otherwise the Z-bit is set. 
Notes: 
1. After execution: 
RO = number of bytes remaining in the string (including the 


unequal one) if unequal byte located; otherwise @ 


Rl = address of the byte located if byte located; otherwise 
address 
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of one byte beyond the string. 


2. If the string has zero length, condition code Z is set just as 
though each byte of the entire string were equal to character. 
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SPANC Span Characters 


Format: 


opcode len.rw, addr.ab, tbladdr.ab, mask.rb 
Operation: 


tmpl <- len; 

tmp2 <- addr; 

if tmpl GTRU @ then 
begin 

while {tmpl NEQU 9} AND 
{{(tbladdr + ZEXT((tmp2))) AND mask} NEQ 9} do 
begin 
tmpl <- tmpl - 1; 
tmp2 <- tmp2 + 1; 
end; 
end; 

R@ <- tmpl; 

Rl <- tmp2; 

R2 <- @; 

R3 <- tbladdr; 


Condition Codes: 


N <- @; 
Z <- R® EQL @; 
V <- @; 
C <- @; 


Exceptions: 
none 
Opcodes: 


2B SPANC Span Characters 


Description: 


The bytes of the string specified by the length and address operands are 
succesSively used to index into a 256 byte table whose zeroth entry 
address is specified by the table address operand. The byte selected 
from the table is ANDed with the mask operand. The operation continues 
until the result of the AND is zero or all the bytes of the string have 
been exhausted. If a zero AND result is detected, the condition code 
Z-bit is cleared; otherwise, the Z-bit is set. 
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l. After execution: 


R@®@ = number of bytes remaining in the string (including 
the byte which produced the zero AND result) 
R® is zero only if there was no zero AND result. 


Rl = address of the byte which produced a zero AND 
result; or, if no non-zero result, address of 
one byte beyond the string 

R2 = @ 


R3 


address of the table. 


2. If the string has zero length, the condition code Z is set just 
as though the entire string were spanned. 
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4.11 CYCLIC REDUNDANCY CHECK INSTRUCTION 


This instruction is designed to implement the calculation and _ checking 
of a cyclic redundancy check for any CRC polynomial up to 32 bits. 
Cyclic Redundancy Checking is an error detection method involving a 
division of the data stream by a CRC polynomial. The data stream is 
represented as a standard VAX-11 string in memory. Error detection is 
accomplished by computing the CRC at the source and again at the 
destination, comparing the CRC computed at each end. The choice of the 
polynomial is such as to minimize the number of undetected block errors 
of specific lengths. The choice of a CRC polynomial is not given here; 
see, for example, the article "Cyclic Codes for Error Detection" by W. 
Peterson and D. Brown in the Proceedings of the IRE (January, 1961). 


The operands to the CRC instruction are a string descriptor, a 
16-longword table, and an initial CRC. The string descriptor is a 
standard VAX-11 operand pair of the length of the string in bytes (up to 
65,535) and the starting address of the string. The contents of the 
table are a function of the CRC polynomial to be used. It can be 
calculated from the polynomial by the algorithm in the notes. Several 
common CRC polynomials are also included in the notes. The initial CRC 
is used to start the polynomial correctly. Typically, it has the value 
® or -l, but would be different if the data stream is represented by a 
sequence of non-contiguous strings. 


The CRC instruction operates by scanning the string, and for each byte 
of the data stream, including it in the CRC being calculated. The byte 
is included by XORing it to the right 8 bits of the CRC. Then the CRC 
is shifted right 1 bit, inserting zero on the left. The right most bit 
of the CRC (lost by the shift) is used to control the XORing of the CRC 
polynomial with the resultant CRC. If the bit is set, the polynomial is 
XORed with the CRC. Then the CRC is again shifted right and _ the 
polynomial is conditionally XORed with the result a total of eight 
times. The actual algorithm used can shift by one, two, or four bits at 
a time using the appropriate entries in a specially constructed table. 
The instruction produces a 32-bit CRC. For shorter polynomials, the 
result must be extracted from the 32-bit field. The data stream must be 
a multiple of eight bits in length. If it is not, the stream must be 
right adjusted in the string with leading 98 bits. 
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CRC Calculate Cyclic Redundancy Check 


Format: 


opcode tbl.ab, inicrce.rl, strlen.rw, stream.ab 


Operation: 


tmpl <- strlen; 

tmp2 <- stream; 

tmp3 <- inicre; 

tmp4 <- tbl; 

while tmpl NEQU 9 do 


begin 
tmp3<7:0><- tmp3<7:9> XOR (tmp2)+; 
for tmp5 <- 1,limit do 'see note 5 for 


limit,s,i 
tmp3 <- ZEXT(tmp3<3l:s>) XOR 
(tmp4 + {4*ZEXT(tmp3<s-1:0>*i) }; 
tmpl <- tmpl -l; 


end; 
R@ <- tmp3; 
Rl <- @; 
R2 <- @;3 
R3 <- tmp2; l!address of end of string + 1 


Condition Codes: 


N <- R@ LSS @; 
Z <- R®@ EQL @; 
V <- @; 
C <- @; 


Exceptions: 
none 
Opcodes: 


OB CRC Calculate Cyclic Redundancy Check 


Description: 


The CRC of the data stream described by the string descriptor is 
calculated. The initial CRC is given by inicre and is normally @ or -l 
unless the CRC is calculated in several steps. The result is left in 
RO. If the polynomial is less than order-32, the result must be 
extracted from the result. The CRC polynomial is expressed by the 
contents of the 16-longword table. See the notes for the calculation of 
the table. 
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Notes: 


l. If the data stream is not a multiple of 8-bits long, it must be 
right adjusted with leading zero fill. 


2. If the CRC polynomial is less than order 32, the result must be 
extracted from the low order bits of R@. 


3. The following algorithm can be used to calculate the CRC table 
given a polynomial expressed as follows: 


polyn<n> <- {coefficient of x**{order -l-n}} 


This routine is available as system library routine 
LIBSCRC_TABLE (poly.rl, table.ab). The table is the 
location of a 64-byte (16-longword) table into which 
the result will be written. 


SUBROUTINE LIBSCRC_TABLE (POLY, TABLE) 
INTEGER*4 POLY, TABLE(@:15), TMP, X 
DO 198 INDEX = @, 15 


TMP = INDEX 
DO 159 I =1, 4 
X = TMP .AND. 1 
TMP = ISHFT (TMP,-1) !logical shift right one bit 
IF (X .EQ. 1) TMP = TMP .XOR. POLY 
158 CONTINUE 
TABLE (INDEX) = TMP 


199 CONTINUE 
RETURN 
END 


4. The following are descriptions of some commonly used CRC 
polynomials. 


CRC-16 (used in DDCMP and Bisync) 


polynomial: x°16 + x715 + x72 + 1 
poly: 128981 (octal) 
initialize: 4 

result: R@<15: 8> 


CCITT (used in ADCCP, HDLC, SDLC) 


polynomial: x716 + x712 + x75 + 1 
poly: 182818 (octal) 
initialize: -1<15:@> 
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result: one's complement of R@#<15:4> 
AUTODIN-ITI 
polynomial: X~324+x*264+xX7234+x%7224+x°164+x712 
+xX°114+x7104+x°84x774+x 754x744 724+x41 
poly: EDB88328 (hex) 
initialize: -1<31:0> 
result: one's complement of R#@<31:4> 


5. This instruction produces an UNPREDICTABLE result unless’ the 
table is well formed, such as produced in note 3. Note that 
for any well formed table, entry [9] is always ®@ and entry[8] 
is always the polynomial expressed as in note 3. The operation 


can be implemented using shifts of one, two, or four bits at a 
time as follows: 


shift steps table index table index use table 
per byte multiplier entries 
(s) (limit) (i) 
1 8 tmp3<d@> 8 (8J)=08,[(8] 
2 4 tmp3<1:@> 4 
(0@]=0,(4],[(8],[12] 
4 2 tmp3<3: > 1 all 


6. If the stream has zero length, RY receives the initial CRC. 
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4.12 DECIMAL STRING INSTRUCTIONS 


Decimal string instructions operate on Packed Decimal strings. Convert 
instructions are provided between Packed Decimal and Trailing Numeric 
String (Overpunched and Zoned) and Leading Separate Numeric. string 
formats. Where necessary a specific data type is identified. Where the 
phrase decimal string is used, it means any of the three data types. 


A decimal string is specified by 2 operands: 


1. For all decimal strings the length is the number of digits in 
the string. The number of bytes in the string is a function of 
the length and the type of decimal string referenced (see 
Chapter 2). 


2. The address of the lowest addressed byte of the string. This 
byte contains the most significant digit for Trailing Numeric, 
and packed decimal strings. This byte contains a sign for Left 
Separate Numeric strings. The address is specified by a byte 
operand of address access type. 


Each of the decimal string instructions uses general registers RQ 
through R3 or R@#® through R5 to contain a control block which maintains 
updated addresses and state during the execution of the instruction. At 
completion, the registers containing addresses are available to the 
software to use as string specification operands for a _ subsequent 
instruction on the same decimal strings. 


During the execution of the instructions, pending interrupt conditions 
are tested and if any is found, the control block is updated. First 
Part Done is set in the PSL, and the instruction interrupted (See 
chapter 6). After the interruption, the instruction resumes 
transparently. The format of the control block at completion is: 


3 

1 g 
Sim rrr rr re ee ee + 

| g | : RO 
ea anaemia + 

| ADDRESS 1 | : Rl 
th ee = + 

| Gg | : R2 
a + 

| ADDRESS 2 | : R3 
$--------- - - -- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - + 

| : R4 
a - + 

| ADDRESS 3 | : R5 
me ree + 


The fields ADDRESS 1, ADDRESS 2 and ADDRESS 3 (if required) contain’ the 
address of the byte containing the most Significant digit of the first, 
second and third (if required) string operands respectively. 
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The decimal string instructions treat decimal strings as integers with 
the decimal point assumed immediately beyond the least significant digit 
of the string. If a string in which a result is to be stored is’ longer 
than the result, its most significant digits are filled with zeros. 


4.12.1 Decimal Overflow 


Decimal overflow occurs if the destination string is too short to 
contain all the digits (excluding leading zeroes) of the result. On 
overflow, the destination string is replaced by the correctly signed 
least Significant digits of the true result (even if the stored result 
is -@). Note that neither the high nibble of an even length packed 
decimal string, nor the sign byte of a Leading Separate Numeric string 
is used to store result digits. 


4.12.2 Zero Numbers 


A zero result has a positive sign for all operations which complete 
without decimal overflow, except for CVTPT which does not fixup a -@ to 
a +@. However, when digits are lost because of overflow, a zero result 
receives the sign (poSitive or negative) of the correct result. 


A decimal string with value -®@ is treated as identical to a decimal 
String with value +@. Thus for example +8 compares equal to -9. When 
condition codes are affected on a -@ result they are affected as if the 
result were +@: i.e., N is cleared and Z is Set. 


4.12.3 Reserved Operand Exception 


A reserved operand abort occurs if the length of a decimal string 
operand is outSide the range 9 through 31, or if an invalid sign or 
digit is encountered in CVTSP, and CVTTP. The PC points to the opcode 
of the instruction causing the exception. 


4.12.4 UNPREDICTABLE Results 


The result of any operation is UNPREDICTABLE if any source decimal 
String operand contains invalid data. Except for CVTSP and CVTTP, the 
decimal string instructions do not verify the validity of source operand 
data. 


If the destination operands overlap any source operands, the result of 
an operation will, in general, be UNPREDICTABLE. The destination 
Strings, registers used by the instruction and condition codes will, in 
general, be UNPREDICTABLE when a reserved operand abort occurs. 
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4.12.5 Packed Decimal Operations 


Packed decimal strings generated by the decimal string instructions 
always have the preferred sign representation: 12 for "+" and 13 for 
"=". An even length packed decimal string is always generated with a 
"@" digit in the high nibble of the first byte of the String. 


A packed decimal string contains an invalid nibble if: 
1. A digit occurs in the sign position. 
2. A sign occurs in a digit position. 


3. For an even length string, a non-zero nibble occurs in the high 
order nibble of the lowest addressed byte. 


4.12.6 Zero Length Decimal Strings 


The length of a packed decimal string can be @. In this case, the value 
is zero (plus or minus) and one byte of storage is occupied. This byte 
must contain a "@" digit in the high nibble and the sign in the low 
nibble. 


The length of a trailing numeric string can be @. In this case no 
Storage is occupied by the string. If a destination operand is a zero 
length trailing numeric string, the sign of the operation is lost. 
Memory access faults will not occur when a zero length trailing numeric 
operand is specified because no memory reference occurs. The value of a 
zero length trailing numeric string is identically @. 


The length of a leading separate numeric string can be @. In this’ case 
one byte of storage is occupied by the sign. Memory is accessed when a 
zero length operand is specified, and a reserved operand abort will 
occur if an invalid sign is detected. The value of a zero length 
leading separate numeric string is identically @. 
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4.12.7 Instruction Descriptions 


The following instructions are described in this section. 
Instructions 


1. Add Packed 4 Operand 1 
ADDP4 addlen.rw, addaddr.ab, sumlen.rw, sumaddr.ab, {R9-3.wl} 


2. Add Packed 6 Operand 1 
ADDP6 addllen.rw, addladdr.ab, add2len.rw, add2addr.ab, 
sumlen.rw, sumaddr.ab, {R@-5.wl} 


3. Arithmetic Shift and Round Packed 1 
ASHP cnt.rb, srclen.rw, sSrcaddr.ab, round.rb, dstlen.rw, 
dstaddr.ab, {R@-3.wl} 


4. Compare Packed 3 Operand 1 
CMPP3 len.rw, srcladdr.ab, src2addr.ab, {R9-3.wl} 
5. Compare Packed 4 Operand 1 
CMPP4 srcllen.rw, srcladdr.ab, src2len.rw, src2addr.ab, 
{R0-3.wl} 
6. Convert Long to Packed 1 
CVTLP src.rl, dstlen.rw, dstaddr.ab, {R#@-3.wl} 
7. Convert Packed to Long 1 
CVTPL srclen.rw, srcaddr.ab, {R®-3.wl}, dst.wl 
8. Convert Packed to Leading Separate 1 
CVTPS srclen.rw, srcaddr.ab, dstlen.rw, dstaddr.ab, {R@-3.wl} 
9. Convert Packed to Trailing 1 
CVTPT srclen.rw, srcaddr.ab, tbladdr.ab, dstlen.rw, dstaddr.ab, 
{RG-3.wl} 
18. Convert Leading Separate to Packed 1 
CVTSP srclen.rw, srcaddr.ab, dstlen.rw, dstaddr.ab, {R@-3.wl} 
ll. Convert Trailing to Packed 1 
CVTTP srclen.rw, srcaddr.ab, tbladdr.ab, dstlen.rw, dstaddr.ab, 
{R0-3.wl} 
12. Divide Packed 1 


DIVP divrlen.rw, divraddr.ab, divdlen.rw, divdaddr.ab, 
quolen.rw, quoaddr.ab, {R@-5.wl, -16(SP):-1(SP) .whb} 


13. Move Packed 1 
MOVP len.rw, srcaddr.ab, dstaddr.ab, {R9-3.wl} 


14. Multiply Packed 1 
MULP mulrlen.rw, mulraddr.ab, muldlen.rw, muldaddr.ab, 
prodlen.rw, prodaddr.ab, {R@-5.wl} 
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15. Subtract Packed 4 Operand 1 
SUBP4 sublen.rw, subaddr.ab, diflen.rw, difaddr.ab, {R#®-3.wl} 


16. Subtract Packed 6 Operand 1 
SUBP6 sublen.rw, subaddr.ab, minlen.rw, minaddr.ab, 
diflen.rw, difaddr.ab, {R@-5.wl} 
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ADDP Add Packed 
Format: 


opcode addlen.rw, addaddr.ab, sumlen.rw, 
sumaddr.ab 


opcode addllen.rw, addladdr.ab, add2len.rw, 
add2addr.ab, sumlen.rw, sumaddr.ab 


Operation: 


({sumaddr + ZEXT(sumlen/2)} : sumaddr) <- 
({sumaddr + ZEXT(sumlen/2)} : sumaddr) + 
({addaddr + ZEXT(addlen/2)} : addaddr); !4 operand 


({sumaddr + ZEXT(sumlen/2)} : sumaddr) <- 
({add2addr + ZEXT(add2len/2)} : add2addr) + 
({addladdr + ZEXT(addllen/2)} : addladdr); 16 
operand 


Condition Codes: 
N <- {sum string} LSS @; 
Z <- {sum string} EQL @; 
V <- {decimal overflow}; 
C <- @; 


Exceptions: 


reserved operand 
decimal overflow 


Opcodes: 
20 ADDP 4 Add Packed 4 Operand 
21 ADDP6 Add Packed 6 Operand 


Description: 


In 4 operand format, the addend string specified by the addend length 
and addend address operands is added to the sum string specified by the 
Sum length and sum address operands and the sum string is’ replaced by 
the result. 


In 6 operand format, the addend 1 string specified by tthe addend 1 
length and addend 1 address operands is added to the addend 2 string 
Specified by the addend 2 length and addend 2 address operands. The sum 
String specified by the sum length and sum address operands is replaced 
by the result. 


Instructions 
DECIMAL STRING 
Notes: 
l. After 
RO 


Rl 


R2 


R3 


2. After 
RG 


Rl 


R2 


R3 


R4 


R5 


3. The sum string, R@ through R3 (or RO through R5 for ADDP6) 
codes are 
overlaps the addend, addendl, or addend2 strings; 


the 


condition 


INSTRUCTIONS 


execution of 


= address of 
Significant 


= @ 


address of 
Significant 


execution of 


= Q 


address of 
Significant 


= Q 


address of 
Significant 


= Q 


address of 
Significant 


addendl, addend2 


invalid nibble; 


ADDP4: 


the byte 
digit of 


the byte 
digit of 


ADDP6: 


the byte 
digit of 


the byte 
digit of 


the byte 
digit of 


or sum 
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containing the most 
the addend string 


containing the most 
the sum string 


containing the most 
the addendl string 


containing the most 
the addend2 string 


containing the most 
the sum string 


UNPREDICTABLE if 


sum 
the addend, 


Page 4-181 


and 
string 


(4 operand only) strings contain an 


or a reserved operand abort occurs. 
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ASHP Arithmetic Shift and Round Packed 
Format: 


opcode cnt.rb, srclen.rw, srcaddr.ab, round.rb 
dstlen.rw, dstaddr.ab 


Operation: 
({dstaddr + ZEXT(dstlen/2)} : dstaddr) <- 
{({srcaddr + ZEXT(srclen/2)} : srcaddr) 
+ {round <3:@0>*{10 ** {-cnt-1}}}} 
* {180 ** cnt} ; 
Condition Codes: 
N <- {dst string} LSS @; 
Z <- {dst string} EQL @; 
V <- {decimal overflow}; 
C <- @; 
Exceptions: 


reserved operand 
decimal overflow 


Opcodes: 


F8 ASHP Arithmetic Shift and Round Packed 


Description: 


The source string specified by the source length and source address 
operands is scaled by a power of 18 specified by the count operand. The 
destination string specified by the destination length and destination 
address operands is replaced by the result. 


A positive count operand effectively multiplies; a negative count 
effectively divides; and a zero count just moves and affects condition 
codes. When a negative count is specified, the result is rounded using 
the Round Operand. 
Notes: 

1. After execution: 


RO = @ 


Rl 


address of the byte containing the most significant 
digit of the source string 
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R3 = address of the byte containing the most significant 
digit of the destination string 


The destination string, R@ through R3, and the condition codes 
are UNPREDICTABLE if the destination String overlaps the source 
String, the source string contains an invalid nibble, or a 
reserved operand abort occurs. 


When the count operand is negative, the result is rounded by 
decimally adding bits 3:@ of the round operand to the most 
Significant low order digit discarded and propagating the 
carry, if any, to higher order digits. Both the source operand 
and the round operand are considered to be quantities of the 
same Sign for the purpose of this addition. 


If bits 7:4 of the round operand are non-zero, or if bits 3:9 
of the round operand contain an invalid packed decimal digit 
the result is UNPREDICTABLE. 


When the count operand is zero or positive, the round operand 
has no effect on the result except as specified in note 4, 


The round operand is normally five. Truncation may be 
accomplished by using a zero round operand. 
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CMPP Compare Packed 


Format: 
opcode len.rw, srcladdr.ab, src2addr.ab 3 operand 


opcode srcllen.rw, srcladdr.ab, src2len.rw, 
src2addr.ab 4 operand 


Operation: 


({srcladdr + ZEXT(len/2)} : srcladdr) - 
({src2addr + ZEXT(len/2)} : srce2addr); !3 operand 


({srcladdr + ZEXT(srcllen/2)} : srcladdr) - 
({src2addr + ZEXT(src2len/2)} : sre2addr); 14 
operand 


Condition Codes: 


N <- {srel string} LSS {src2 string}; 


Z <- {srel string} EQL {srce2 string}; 
V <- @; 
C <- @; 


Exceptions: 


reserved operand 


Opcodes: 
35 CMPP3 Compare Packed 3 Operand 
37 CMPP4 Compare Packed 4 Operand 


Description: 


In 3 operand format, the source 1 string specified by the length and 
source 1 address operands is compared to the Source 2 string specified 
by the length and source 2 address operands. The only action is_ to 
affect the condition codes. 


In 4 operand format, the source 1 string specified by the source 1 
length and source 1 address operands is compared to the source 2 string 
specified by the source 2 length and source 2 address_ operands. The 
only action is to affect the condition codes. 
Notes: 

1. After execution of CMPP3 or CMPP4; 


RO = @ 
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Rl = address of the byte containing the most 
Significant digit of string l. 


Gg 


pe) 
NO 
H] 


ee) 
WW 
ll 


address of the byte containing the most 
Significant digit of string 2. 


2. R@ through R3 and the condition codes are UNPREDICTABLE, if the 
source strings overlap, if either string contains an invalid 
nibble or if a reserved operand abort occurs. 
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CVTLP Convert Long to Packed 
Format: 

opcode src.rl, dstlen.rw, dstaddr.ab 
Operation: 

({dstaddr + ZEXT(dstlen/2)} : dstaddr) <- conversion of src; 
Condition Codes: 

N <- {dst string} LSS @; 

Z <- {dst string} EQL @; 

V <- {decimal overflow}; 

C <- @; 
Exceptions: 


reserved operand 
decimal overflow 


Opcodes: 

F9 CVTLP Convert Long to Packed 
Description: 
The source operand is converted to a packed decimal string and_ the 
destination string operand specified by the destination length and 
destination address operands is replaced by the result. 


Notes: 


l. After execution: 


RB = Q 
Rl = g 
R2 = Q 
R3 = address of the byte containing the most significant 


digit of the destination string 


2. The destination string, R#@ through R3, and the condition codes 
are UNPREDICTABLE on a reserved operand abort. 


3. Overlapping operands produce correct results. 
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CVTPL Convert Packed to Long 
Format: 

opcode srclen.rw, srcaddr.ab, dst.wl 
Operation: 

dst <- conversion of ({srcaddr + ZEXT(srclen/2)} : srcaddr); 
Condition Codes: 

N <- dst LSS @; 

Z <- dst EQL @; 

V <- {integer overflow}; 

C <- @; 
Exceptions: 


reserved operand 
integer overflow 


Opcodes: 


36 CVTPL Convert Packed to Long 


Description: 

The source string specified by the source length and source address 
operands is converted to a longword and the destination operand is 
replaced by the result. 


Notes: 


l. After execution: 


RG = @ 

Rl = address of the byte containing the most significant 
digit of the source string 

R2 = @ 

R3 = @ 


2. The destination operand, R® through R3, and the condition codes 
are UNPREDICTABLE on a reserved operand abort or if the string 
contains an invalid nibble. 


3. The destination operand is stored after the registers are 
updated as specified in 1 above. Thus R@ through R3 may be 
used as the destination operand. 
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4. 


If the source string has a value outside the range 
-2,147,483,648 through 2,147,483,647 integer overflow occurs 
and the destination operand is replaced by the low order 32 
bits of the correctly signed infinite precision conversion. 
Thus, on overflow the sign of the destination may be different 
from the sign of the source. 


Overlapping operands produce correct results. 
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CVTPS Convert Packed to Leading Separate Numeric 
Format: 

opcode srclen.rw, srcaddr.ab, dstlen.rw, dstaddr.ab 
Operation: 

{dst string} <- conversion of {sre string}; 
Condition Codes: 

N <- {sre string} LSS @; 

Z <- {sre string} EQL @; 

V <- {decimal overflow}; 

C <=— @;3 
Exceptions: 


reserved operand 
decimal overflow 


Opcodes: 


88 CVTPS Convert Packed to Leading Separate Numeric 


Description: 


The source packed decimal string specified by the source length and 
source address operands iS converted to a leading separate numeric 
String. The destination string specified by the destination length and 
destination address operands is replaced by the result. 


Conversion is effected by replacing the lowest addressed byte of the 
destination string with the ASCII character 't+' or '-', determined by 
the sign of the source string. The remaining bytes of the destination 
String are replaced by the ASCII representations of the values of the 
corresponding packed decimal digits of the source string. 

Notes: 

1. After execution: 
RB = @ 


Rl 


address of the byte containing the most Significant 
digit of the source string 


R2 = @ 


R3 address of the sign byte of the destination string 
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Z« 


The destination string, R@ through R3, and the condition codes 
are UNPREDICTABLE if the destination string overlaps the source 
string, the source string contains an invalid nibble, or a 
reserved operand abort occurs. 


This instruction produces an ASCII "+" or "-" in the sign byte 
of the destination string. 


If decimal overflow occurs, the value stored in the destination 


may be different from the value indicated by the condition 
codes (Z and N bits). 


If the conversion produces a -@ without overflow, the 
destination leading separate numeric string is changed to a +90 
representation. 
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CVTPT Convert Packed to Trailing Numeric 
Format: 

opcode srclen.rw, srcaddr.ab, tbladdr.ab, dstlen.rw, dstaddr.ab 
Operation: 

{dst string} <- conversion of {src string}; 
Condition Codes: 


N <- {sre string} LSS @; 
Z <- {sre string} EQL @; 
V <- {decimal overflow}; 
C <- @; 


Exceptions: 


reserved operand 
decimal overflow 


Opcodes: 


24 CVTPT Convert Packed to Trailing Numeric 


Description: 


The source packed decimal string specified by the source length and 
source address operands is converted to a trailing numeric string. The 
destination string specified by the destination length and destination 
address operands is replaced by the result. The condition code N and Z 
bits are affected by the value of the source packed decimal string. 


Conversion is effected by using the highest addressed byte (even if the 
Source string value is -@) of the source string (i.e., the byte 
containing the sign and the least significant digit) as an _ unsigned 
index into a 256 byte table whose zeroth entry address is specified by 
the table address operand. The byte read out of the table replaces’ the 
least significant byte of the destination string. The remaining bytes 
of the destination string are replaced by the ASCII representations of 
the values of the corresponding packed decimal digits of the source 
String. 


Notes: 


l. After execution: 


Rl = address of the byte containing the most significant 
digit of the source string 
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R2 Q 


R3 address of the most Significant digit of the 


destination string 


The destination string, R@ through R3, and the condition codes 
are UNPREDICTABLE if the destination string overlaps the source 
string or the table, the source string or the table contains an 
invalid nibble, or a reserved operand abort occurs. 


The condition codes are computed on the value of the source 
string even if overflow results. In particular, condition code 
N is set if and only if the source is non-zero and contains a 
minus Sign. 


By appropriate specification of the table, conversion to any 
form of trailing numeric string may be realized. See Chapter 2 
for the preferred form of trailing overpunch, zoned _ and 
unsigned data. In addition, the table may be set up for 
absolute value, negative absolute value or negated conversions. 
The translation table may be referenced even if the length of 
the destination string is zero. 


Decimal overflow occurs if the destination string is too’ short 
to contain the converted result of a non-zero packed decimal 
source string (not including leading zeroes). Conversion of a 
source string with zero value never results’ in overflow. 
Conversion of a non-zero source string to a zero length 
destination string results in overflow. 


If decimal overflow occurs, the value stored in the destination 
may be different from the value indicated by the condition 
codes (Z and N bits). 
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CVTSP 


Format: 


Convert Leading Separate Numeric to Packed 


opcode srclen.rw, srcaddr.ab, dstlen.rw, dstaddr.ab 


Operation: 


{dst 


string} <- conversion of {sre string} 


Condition Codes: 


N <- 
Z<- 
V<- 
C <= 


Exceptions: 


{dst string} LSS @; 
{dst string} EQL @; 
{decimal overflow}; 
0; 


reserved operand 
decimal overflow 


Opcodes: 


G9 CVTSP 


Description: 


Convert Leading Separate Numeric to Packed 


The source numeric string specified by the source length and_ source 
address operands iS converted to a packed decimal string and the 
destination string specified by the destination address and destination 
length operands is replaced by the result. 


Notes: 


l. A reserved operand abort occurs if: 


1. 


2. 


The length of the source Leading Separate numeric String is 
outside the range @ through 3l. 


The length of the destination packed decimal string is 
outside the range @ through 3l. 


The source string contains an invalid byte. An invalid 
byte is any character other than an ASCII "6" through "9" 
in a digit byte or an ASCII "+", "<space>", or "-—" in the 
Sign byte. 


2. After execution: 


RG = @ 
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Rl = address of the sign byte of the Source string 


R2 ) 


R3 


address of the byte containing the most significant 
digit of the destination string. 


3. The destination string, R®@ through R3, and the condition codes 
are UNPREDICTABLE if the destination string overlaps the source 
String, or a reserved operand abort occurs. 
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CVTTP Convert Trailing Numeric to Packed 
Format: 

opcode srclen.rw, srcaddr.ab, tbladdr.ab, dstlen.rw, dstaddr.ab 
Operation: 

{dst string} <- conversion of {sre string} 
Condition Codes: 

N <- {dst string}LSS @; 

Z <- {dst string} EQL @; 

V <- {decimal overflow}; 

C <- @; 
Exceptions: 


reserved operand 
decimal overflow 


Opcodes: 


26 CVTTP Convert Trailing Numeric to Packed 


Description: 


The source trailing numeric string specified by the source length and 
source address operands is converted to a packed decimal string and the 
destination packed decimal string specified by the destination address 
and destination length operands is replaced by the result. 


Conversion is effected by using the highest addressed (trailing) byte of 
the source string as an unSigned index into a 256 byte table whose 
zeroth entry is specified by the table address operand. The byte read 
out of the table replaces the highest addressed byte of the destination 
String (i.e. the byte containing the sign and the least’ significant 
digit). The remaining packed digits of the destination string are 
replaced by the low order 4 bits of the corresponding bytes in the 
source string. 


Notes: 
1. A reserved operand abort occurs if: 


1. The length of the source trailing numeric string is outside 
the range 9 through 3l. 


2. The length of the destination packed decimal string is 
outside the range @ through 3l. 
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2. 


3. The source string contains an invalid byte. An invalid 
byte is any value other than ASCII "9" through "9" in any 
high order byte (i.e., any byte except the least 
Significant byte). 


4. The translation of the least significant digit produces an 
invalid packed decimal digit or Sign nibble. 


After execution: 


RG = @ 

Rl = address of the most significant digit of the source 
string 

R2 = Q 


R3 


address of the byte containing the most significant 
digit of the destination string. 


The destination string, RY through R3, and the condition codes 
are UNPREDICTABLE if the destination string overlaps the Source 
String or the table, or a reserved operand abort occurs. 


If the convert instruction produces a -@ without overflow, the 
destination packed decimal String is changed to a +@ 
representation, condition code N is cleared and Z is set. 


If the length of the source string is @, the destination packed 
decimal String is set identically equal to 96, and _ the 
translation table is not referenced. 


By appropriate specification of the table, conversion from any 
form of trailing numeric string may be realized. See Chapter 2 
for the preferred form of trailing overpunch, zoned _ and 
unsigned data. In addition, the table may be set up for 
absolute value, negative absolute value or negated conversions. 


If the table translation produces a sign nibble containing any 
valid sign, the preferred sign representation is stored in the 
destination packed decimal string. 
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DIVP Divide Packed 
Format: 


opcode divrlen.rw, divraddr.ab, divdlen.rw, 
divdaddr.ab, quolen.rw, quoaddr.ab 


Operation: 


({quoaddr + ZEXT(quolen/2)} : quoaddr) <- 
({divdaddr + ZEXT(divdlen/2)} : divdaddr) / 
({divraddr + ZEXT(divrlen/2)} : divraddr); 


Condition Codes: 


N <- {quo string} LSS @; 
Z <- {quo string} EQL @; 
V <- {decimal overflow}; 
C <- @; 


Exceptions: 
reserved operand 
decimal overflow 
divide by zero 


Opcodes: 


27 DIVP Divide Packed 


Description: 


The dividend string specified by the dividend length and dividend 
address operands is divided by the divisor string specified by the 
divisor length and divisor address _ operands, The quotient string 
specified by the quotient length and quotient address operands is 
replaced by the result. 


Notes: 
1. This instruction allocates a 16 byte workspace on the _ stack. 
After execution SP is restored to itsS original contents and the 
contents of {(SP)-16}:{(SP)-1} are UNPREDICTABLE. 


2. The division is performed such that: 


1. The absolute value of the remainder (which is lost) is less 
that the absolute value of the divisor. 


2. The product of the absolute value of the quotient times the 
absolute value of the divisor is less than or equal to the 
absolute value of the dividend. 
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3. 


3. The sign of the quotient is determined by the rules of 
algebra from the signs of the dividend and the divisor. If 
the value of the quotient is zero, the sign is always 
positive. 


After execution: 


RG = @ 

Rl = address of the byte containing the most significant 
digit of the divisor string 

R2 = @ 

R3 = address of the byte containing the most significant 
digit of the dividend string 

R4 = @ 

R5 = address of the byte containing the most significant 


digit of the quotient string. 


The quotient string, R@® through R5, and the condition codes are 
UNPREDICTABLE if the quotient string overlaps the divisor or 
dividend strings, the divisor or dividend string contains an 
invalid nibble, the divisor is 8 or a reserved operand abort 
occurs. 
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MOVP Move Packed 
Format: 

opcode len.rw, srcaddr.ab, dstaddr.ab 
Operation: 


({dstaddr + ZEXT(len/2)} : dstaddr) <- 
({srcaddr + ZEXT(len/2)} : srcaddr); 


Condition Codes: 


N <- {dst string} LSS @; 


Z <- {dst string} EQL @; 
V <- @; 
C <- C; 


Exceptions: 
reserved operand 
Opcodes: 
34 MOVP Move Packed 

Description: 
The destination string specified by the length and destination address 
operands is replaced by the source string specified by the length and 
source address operands. 
Notes: 

l. After execution: 

RB = @ 


Rl = address of the byte containing the most 
Significant digit of the source string 


R2 = @ 


R3 = address of the byte containing the most 
Significant digit of the destination string. 


2. The destination string, R® through R3, and the condition codes 
are UNPREDICTABLE if the destination string overlaps the source 
string, the source string contains an invalid nibble, or a 
reserved operand abort occurs. 
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3. If the source is -8, the result is +8, N is cleared and 2Z is 
set. 
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MULP Multiply Packed 
Format: 


opcode mulrlen.rw, mulraddr.ab, muldlen.rw, 
muldaddr.ab, prodlen.rw, prodaddr.ab 


Operation: 


({prodaddr + ZEXT(prodlen/2)} : prodaddr) <- 
({muldaddr + ZEXT(muldlen/2)} : muldaddr) * 
({mulraddr + ZEXT(mulrlen/2)} : mulraddr); 


Condition Codes: 
N <- {prod string} LSS @; 
Z <- {prod string} EQL @; 
V <- {decimal overflow}; 
C <- @; 


Exceptions: 


reserved operand 
decimal overflow 


Opcodes: 


25 MULP Multiply Packed 


Description: 


The multiplicand string specified by the multiplicand length and 
multiplicand address operands is multiplied by the multiplier string 
specified by the multiplier length and multiplier address operands. The 
product string specified by the product length and product address 
operands is replaced by the result. 


Notes: 


l. After execution: 


RG = @ 

Rl = address of the byte containing the most 
Significant digit of the multiplier string 

R2 = Q@ 

R3 = address of the byte containing the most 


Significant digit of the multiplicand string 


R4 = @ 
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R5 = address of the byte containing the most 
Significant digit of the product string 


2. The product string, R® through R5, and the condition codes’ are 
UNPREDICTABLE if the product string overlaps the multiplier or 


multiplicand strings, the multiplier or multiplicand strings 
contain an invalid nibble, or a reserved operand abort occurs. 
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SUBP Subtract Packed 
Format: 


opcode sublen.rw, subaddr.ab, diflen.rw, 
difaddr.ab 4 operand 


opcode sublen.rw, subaddr.ab, minlen.rw, 
minaddr.ab, diflen.rw, difaddr.ab 6 operand 


Operation: 


({difaddr + ZEXT(diflen/2)} : difaddr) <- 
({difaddr + ZEXT(diflen/2)} : Gifaddr) - 
({subaddr + ZEXT(sublen/2)} : subaddr); !4 operand 


({difaddr + ZEXT(diflen/2)} : difaddr) <- 
({minaddr + ZEXT(minlen/2)} : minaddr) - 
({subaddr + ZEXT(sublen/2)} : subaddr); !6 operand 


Condition Codes: 
N <- {dif string} LSS @; 
Z <- {dif string} EQL @; 
V <- {decimal overflow}; 
C <- @; 

Exceptions: 


reserved operand 
decimal overflow 


Opcodes: 
22 SUBP4 Subtract Packed 4 Operand 
23 SUBP6 Subtract Packed 6 Operand 


Description: 


In 4 operand format, the subtrahend string specified by subtrahend 
length and subtrahend address operands is subtracted from the difference 
String specified by the difference length and difference address 
operands and the difference string is replaced by the result. 


In 6 operand format, the subtrahend string specified by the subtrahend 
length and subtrahend address operands is subtracted from the minuend 
string specified by the minuend length and minuend address' operands. 
The difference string specified by the difference length and difference 
address operands is replaced by the result. 


Instructions 12-Feb-82 -- Rev 7 Page 4-204 
DECIMAL STRING INSTRUCTIONS 


Notes: 


Ls 


Zé 


After execution of SUBP4: 
RO = Q 


Rl = address of the byte containing the most 
Significant digit of the subtrahend string 


R2 = @ 


R3 


address of the byte containing the most 
Significant digit of the difference string 


After execution of SUBP6: 
RG = Q@ 


Rl = address of the byte containing the most 
Significant digit of the subtrahend string 


R2 = @ 


R3 


address of the byte containing the most 
Significant digit of the minuend String 


R4 = @ 


R5 


address of the byte containing the most 
Significant digit of the difference string 


The difference string, R® through R3 (RM through R5 for SUBP6), 
and the condition codes are UNPREDICTABLE if the difference 
string overlaps the subtrahend or minuend_ strings; the 
subtrahend, minuend, or difference (4 operand only) strings 
contain an invalid nibble; or a reserved operand abort occurs. 
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4.13 EDIT INSTRUCTION 


This instruction is designed to implement the common editing functions 
which occur in handling fixed format output. It operates by converting 
a packed decimal string to a character’ string. This operation is 
exemplified by a MOVE to a numeric editted (PICTURE) item in COBOL or 
PL/I, but the instruction can be used for other applications as well. 
The operation consists of converting an input packed decimal number to 
an output character string, generating characters for the output. When 
converting digits, options include leading zero fill, leading zero 
protection, insertion of floating sign, insertion of floating currency 
symbol, insertion of special sign representations, and blanking an 
entire field when it is zero. 


The operands to the EDITPC instruction are an input packed decimal 
string descriptor, a pattern specification, and the starting address of 
the output string. The packed decimal descriptor is a standard VAX-11 
operand pair of the length of the decimal string in digits (up to 31) 
and the starting address of the string. The pattern specification is 
the starting address of a pattern operation editing sequence which is 
interpreted much the way that the normal instructions are. The output 
String is described by only its starting address because the pattern 
defines the length unambiguously. 


While the EDITPC instruction is operating, it manipulates two character 
registers and the four condition codes. One character register contains 
the fill character. This is normally an ASCII blank, but would be 
changed to asterisk for check protection. The other character register 
contains the sign character. Initially this contains either an ASCII 
blank or a minus sign depending upon the sign of the input. This can be 
changed to allow other Sign representations such as_ plus/minus’ or 
plus/blank and can be manipulated in order to output special notations 
such as CR or DB. The sign register can also be changed to the currency 
Sign in order to implement a floating currency sign. After execution, 
the condition codes contain the sign of the input (N), the presence of a 
zero source (Z), an overflow condition (V), and the presence of 
Significant digits (C). Condition code N is determined at the start of 
the instruction and is not changed thereafter (except for correcting a 
-% input). The other condition codes are computed and updated as_ the 
instruction proceeds. When the EDITPC instruction terminates, registers 
R@-R5 contain the conventional values after a decimal instruction. 
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EDITPC Edit Packed to Character String 
Format: 

opcode srclen.rw, srcaddr.ab, pattern.ab, dstaddr.ab 
Operation: 


if srclen GTRU 31 then {reserved operand abort}; 
PSW<V,C> <- G; 

PSW<Z> <- 1; 

PSW<N> <- {src has minus sign}; 

R@ <- srclen; 


Rl <- srcaddr; 

R2 <- 2??? ' {if PSW<N> EQL @ then " " else "—"} ' " "; 
'<15:8>=sign, <7:9>=fi11 

R3 <- pattern; 

R4 <—- 2?2?;3 

R5 <- dstaddr; 

exit flag <- false; 


while NOT exit flag do 

begin 

{fetch pattern byte}; 

{if pattern 8:4 no operand}; 

{if pattern 40:47 increment R3 and 
fetch one byte operand}; 

{if pattern 80:AF except 80, 98, AQ 
operand is rightmost nibble}; 

{else {reserved operand}}; 

{perform pattern operator}; 

if NOT exit _flag then {increment R3}; 

end; 


if R®@ NEQ @ then {reserved operand}; 


R®@ <- tmpl; !length of source string 

Rl <- Rl - {tmpl/2} !point to start of source string 
R2 <- @; 

R4 <- @; 


cf 
1£ PSW<Z> EQL 1 then PSW<N> <- @; 


Condition Codes: 


N <- {sre string} LSS @; IN <- @ if sre is -@ 
Z <- {sre string} EQL @; 

V <- {decimal overflow}; Inon-zero digits lost 
C <- {significance}; 


Exceptions: 


reserved operand 
decimal overflow 
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Opcodes: 


38 EDITPC Edit Packed to Character String 


Description: 


The destination string specified by the pattern and destination address 
operands is replaced by the editted version of the source string 
specified by the source length and source address operands. The 
editting is performed according to the pattern string starting at the 
address pattern and extending until a pattern end (EOSEND) pattern 
operator is encountered. The pattern string consists of one byte 
pattern operators. Some pattern operators take no operands. Some _ take 
a repeat count which is contained in the rightmost nibble of the pattern 
operator itself. The rest take a one byte operand which follows’ the 
pattern operator immediately. This operand is either’ an unsigned 
integer length or a byte character. The individual pattern operators 
are described on the following pages. 


Notes: 


1. A reserved operand abort occurs if srclen GTRU 31. 


2. The destination string is UNPREDICTABLE if the source’ string 
contains an invalid nibble, if the EOSADJUST_INPUT operand is 
outside the range 1 through 31, if the source and destination 
Strings overlap, or if the pattern and destination strings 
overlap. 


3. After execution: 


R@ = length of Source string 

Rl = address of the byte containing the most 
Significant digit of the source string 

R2 = @ 

R3 = address of the byte containing the EOSEND 
pattern operator 

R4 = Q 


R5 = address of one byte beyond the last byte 
of the destination string 


If the destination string is UNPREDICTABLE, RY through R5 = and 
the condition codes are UNPREDICTABLE. 


4. If V is set at the end and DV is enabled, numeric overflow trap 
occurs unless the conditions in note 9 are satisfied. 
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5% 


10. 


ie 


The destination length is specified exactly by the pattern 
operators in the pattern string. If the pattern is incorrectly 
Formed or if it is modified during the execution of the 
instruction, the length of the destination string is 
UNPREDICTABLE. 


If the source is -®8, the result may be -® unless a fixup 
pattern operator is included (EOSBLANK_ ZERO or 
EOSREPLACE SIGN). 


The contents of the destination string and the memory preceding 
it are UNPREDICTABLE if the length covered by EOSBLANK ZERO or 
EOSREPLACE SIGN is @ or is outside the destination string. 


If more input digits are requested by the pattern than are 


specified, then a reserved operand abort is taken with R@ = -1 
and R3 = location of pattern operator which requested the extra 
digit. The condition codes and other registers are as 


specified in note 1l. This abort is not continuable. 


If fewer input digits are requested by the pattern than are 
specified, then a reserved operand abort is taken with R3 = 
location of EOSEND pattern operator. The condition codes’ and 
other registers are as specified in note ll. This abort is not 
continuable. 


On an unimplemented or reserved pattern operator, a_e reserved 
operand fault is taken with R3 = location of the faulting 
pattern operator. The condition codes and other registers are 
as specified in note 1l. This fault is continuable as long as 
the defined register state is manipulated according to the 
pattern operator description and the state specified as ??? is 
preserved. 


On a reserved operand exception as specified in notes 8 through 
18, FPD is set and the condition codes and registers are as 
follows: 


N = {sre has minus sign} 

Z = all source digits @ so far 

V = non-zero digits lost 

C = significance 

R@ = -zeros<15:9> ' remaining srclen<15:@> 


Rl = current source location 


R2 


22? " sign ' fill 


R3 = location of edit pattern operator causing exception 
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R4 


Ear ee 


R5 = location of next destination byte 


where: 


zeros = count of source zeros to supply 


Sign = current contents of sign character register 


fill current contents of fill character register 


Instructions 


EDIT INSTRUCTION 


insert: 


moves: 


fixup: 


load: 


control: 


Summary of EDIT pattern operators 


name operand 
EOSINSERT ch 
EOSSTORE SIGN 
EOSFILL r 
EOSMOVE r 
EOSFLOAT r 


EOSEND FLOAT 


EOSBLANK_ ZERO ~~ len 
EOSREPLACE_ SIGN len 


EOSLOAD FILL ch 
EOSLOAD_ SIGN ch 
EOSLOAD PLUS ch 


EOSLOAD MINUS ~~ ch 


EOSSET SIGNIF - 
EOSCLEAR_SIGNIF - 
EOSADJUST INPUT len 
EOSEND _ - 


where: 


ry 
| 


len 


summary 


insert character, 
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insert sign 
insert fill 


move digits, 
move digits, 


end floating sign 
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fill if insignificant 


filling insignificant 
floating sign 


fill backward when zero 
replace with fill if -@ 


load fill 
load sign 
load sign 
load sign 


character 
character 
character 
character 


if positive 
if negative 


set significance flag 
clear significance flag 


adjust source length 


end edit 


one character 
repeat count in the range 1 through 15 
length in the range 1 through 255 
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EDIT pattern operator encoding 


(hex) 
BD EOSEND 
61 EOSEND FLOAT 
G2 EOSCLEAR_SIGNIF 
83 EOSSET SIGNIF 
g4 EOSSTORE SIGN 
95..1F Reserved to DEC 
20..3F Reserved for all time 
49 EOSLOAD_ FILL \ 
41 EOSLOAD SIGN | 
42 EOSLOAD PLUS |-- character is in next byte 
43 EOSLOAD MINUS | 
44 EOSINSERT 
45 EOSBLANK_ ZERO 
46 EOSREPLACE SIGN [-- unsigned length is in next byte 
47] EOSADJUST INPUT / 
48..5F Reserved to DEC 
60..7F Reserved to CSS, customers 


88,90,AQ Reserved to DEC 

81..8F EOSFILL 

91..9F EOSMOVE |-- repeat count is <3:9@> 
Al..AF EOSFLOAT / 


BO..FE Reserved to DEC 
FF Reserved for all time 
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The following pages define each pattern operator in a format similar to 
that of the normal instruction descriptions. In each case, if there is 
an operand it is either a repeat count (r) from 1 through 15, an 
unsigned byte length (len), or a character byte (ch). In the formal 
descriptions, the following two routines are invoked: 


READ: !'function value @ through 9 
if R@ EQL @ then {reserved operand}; 


if R@ LSS @ then 
begin 
READ <- @; 
RO@<31:16> <- RO<31:16> + 1; !see EOSADJUST INPUT 
end; 
else 
begin 
READ <- (R1)<3+4*RO<O>: 4*RB<B>>; !get next nibble 
'alternating high then low 
R@ <- RO - 1; 
if R@<@> EQL 1 then Rl <- Rl +1; 
end; 
return; 


STORE (char): 
(R5) <- char; 
R5 <- R5 + 1; 
return; 


Also the following definitions are used: 


fill R2<7:@0> 


sign R2<15: 8> 
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EOSINSERT Insert Character 
Purpose: 


Insert a fixed character, substituting the fill character if not 
significant 


Format: 

pattern ch 
Operation: 

if PSW<C> EQL 1 then STORE(ch) else STORE(fill); 
Pattern operators: 


44 EOSINSERT Insert Character 


Description: 


The pattern operator is followed by a_ character. If significance is 
set, then the character is placed into the destination. If significance 


is not set, then the contents of the fill register is placed into the 
destination. 


Notes: 


This pattern operator is used for blankable inserts (e.g., 
comma) and fixed inserts (e.g., Slash). Fixed inserts require 
that significance be set (by EOSSET SIGNIF or EOSEND FLOAT). 
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EOSSTORE SIGN Store Sign 
Purpose: 
Insert the Sign character 
Format: 
pattern 
Operation: 
STORE (Sign); 
Pattern operators: 


G4 EOSSTORE SIGN Store Sign 


Description: 
The contents of the sign register is placed into the destination. 
Notes: 
This pattern operator is used for any non-floating arithmetic 


sign. Tt should be preceded by a EOSLOAD PLUS and/or 
EOSLOAD MINUS if the default sign convention is not desired. 
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EOSFILL Store Fill 
Purpose: 
Insert the fill character 
Format: 

pattern r 
Operation: 

repeat r do STORE (fill); 
Pattern operators: 


8x EOSFILL Store Fill 


Description: 


Rev 7 


The right nibble of the pattern operator is 


contents of the fill register 
times. 


Notes: 


This pattern operator is used for fill (blank) 
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count. The 
is placed into the destination repeat 


insertion. 
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EOSMOVE Move Digits 
Purpose: 
Move digits, filling for insignificant digits (leading zeros) 
Format: 

pattern r 
Operation: 

repeat r do 

begin 


tmp <- READ; 
if tmp NEQU @ then 


begin 

PSW<Z> <- @; 

PSW<C> <- 1; 'set Significance 
end; 


if PSW<C> EQL @ then STORE (fill) 
else STORE ("@" + tmp); 
end; 


Pattern operators: 


9x EOSMOVE Move Digits 


Description: 


The right nibble of the pattern operator is the repeat count. For 
repeat times, the following algorithm is executed. The next digit is 
moved from the source to the destination. If the digit is non-zero, 
Significance iS set and zero is cleared. If the digit is not 
Significant (i.e., is a leading zero) it is replaced by the contents of 
the fill register in the destination. 


Notes: 


1. I£ r is greater than the number of digits remaining in the 
source string, a reserved operand abort is taken. 


2. This pattern operator is used to move digits without a floating 
sign. If leading zero suppression is desired, significance 
must be clear. If leading zeros should be explicit, 
Significance must be set. A string of EOSMOVES intermixed with 
EOSINSERTsS and EOSFILLs will handle suppression correctly. 


3. If check protection (*) is desired EOSLOAD FILL must precede 
the EOSMOVE. 
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EOSFLOAT Float Sign 
Purpose: 
Move digits, floating the sign across insignificant digits 
Format: 

pattern r 
Operation: 

repeat r do 

begin 


tmp <- READ; 
if tmp NEQU @ then 


begin 
if PSW<C> EQL @ then 
begin 
STORE (Sign) ; 
PSWXKZ> <- @; 
PSW<C> <- 1; !'set Significance 
end; 
end; 


if PSW<C> EQL @ then STORE (fill) 
else STORE ("@" + tmp); 
end; 


Pattern operators: 


AX EOSFLOAT Float Sign 


Description: 


The right nibble of the pattern operator is the repeat count. For 
repeat times, the following algorithm is executed. The next digit from 
the source is examined. If it is non-zero and significance is not yet 
set, then the contents of the Sign register is stored in the 
destination, significance is set, and zero is cleared. If the digit is 
Significant, it is stored in the destination, otherwise the contents of 
the £111 register is stored in the destination. 


Notes: 


1. If r is greater than the number of digits remaining in the 
source string, a reserved operand abort is taken. 


2. This pattern operator is used to move digits with a floating 
arithmetic sign. The sign must already be setup as for 
EOSSTORE SIGN. A sequence of one or more EOSFLOATS can include 
intermixed EOSINSERTs and EOSFILLs. Significance must be clear 
before the first pattern operator of the Sequence. The 
sequence must be terminated by one EOSEND FLOAT. 
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This pattern operator is used to move digits with a floating 
currency sign. The sign must already be setup with a 
EOSLOAD SIGN. A sequence of one or more EOSFLOATs can include 
intermixed EOSINSERTs and EOSFILLs. Significance must be clear 
before the first pattern operator of the sequence. The 
sequence must be terminated by one EOSEND FLOAT. 
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EOSEND_ FLOAT End Floating Sign 
Purpose: 
End a floating sign operation 
Format: 
pattern 
Operation: 


if PSW<C> EQL @ then 


begin 

STORE (Sign) ; 

PSW<C> <- 1; !set significance 
end; 


Pattern operators: 


01 EOSEND FLOAT End Floating Sign 


Description: 


If the floating sign has not yet been placed in the destination (i.e., 
if significance is not set), the contents of the sign register is stored 
in the destination and significance is set. 


Notes: 


This pattern operator is used after a sequence of one or _ more 
EOSFLOAT pattern operators which start with significance clear. 
The EOSFLOAT sequence can include intermixed EOSINSERTsS'~ and 
EOSFILLs. 
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EOSBLANK_ ZERO Blank Backwards When Zero 
Purpose: 
Fixup the destination to be blank when the value is zero 
Format: 
pattern len 
Operation: 
if len EQLU @ then {UNPREDICTABLE}; 
if PSW<Z> EQL 1 then 
begin 
R5 <- R5 - len; 
repeat len do STORE(fill); 
end; 


Pattern operators: 


45 EOSBLANK_ ZERO Blank Backwards When Zero 


Description: 


4-220 


The pattern operator is followed by an unsigned byte integer length. Tf 
the value of the source string is zero, then the contents of the fill 
register is stored into the last length bytes of the destination string. 


Notes: 


1. The length must be non-zero and within the destination 


already produced. If it is not, the contents 
destination string and the memory preceding 
UNPREDICTABLE. 


String 


the 
are 


2. This pattern operator is used to blank out any characters 
stored in the destination under a forced significance, Such as 


a sign or the digits following the radix point. 
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EOSREPLACE SIGN Replace Sign When Zero 
Purpose: 
Fixup the destination sign when the value is zero 
Format: 
pattern len 
Operation: 


if len EQLU @ then {UNPREDICTABLE}; 
if PSW<Z> EQL 1 then (R5 - len) <- fill; 


Pattern operators: 


46 EOSREPLACE SIGN Replace Sign When Zero 


Description: 

The pattern operator is followed by an unsigned byte integer length. If 
the value of the Source string is zero (i.e., if Z is set), then the 
contents of the fill register is stored into the byte of the destination 
String which is length bytes before the current position. 


Notes: 


1. The length must be non-zero and within the destination string 


already produced. If it is not, the contents of the 
destination string and the memory preceding Lc are 
UNPREDICTABLE. 


2. This pattern operator can be used to correct a stored _ sign 
(EOSEND FLOAT or EOSSTORE SIGN) if a minus was stored and the 
source value turned out to be zero. 
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EOSLOAD _ Load Register 
Purpose: 


Change the contents of the fill or sign register 


Format: 
pattern ch 
Operation: !select one depending on pattern operator 
fill <- ch; !EOSLOAD FILL 
sign <- ch; !EOSLOAD SIGN 
if PSW<N> EQL @ then sign <- ch; !EOSLOAD PLUS 
if PSW<N> EQL 1 then sign <- ch; !EQSLOAD MINUS 


Pattern operators: 


4Q EOSLOAD FILL Load Fill Register 

4) EOSLOAD_SIGN Load Sign Register 

42 EOSLOAD PLUS Load Sign Register If Plus 
43 EOSLOAD MINUS Load Sign Register If Minus 


Description: 


The pattern operator is followed by a character. For EOSLOAD FILL this 
character is placed into the fill register. For EOSLOAD SIGN this 
character is placed into the sign register. For EOSLOAD PLUS this 
character is placed into the sign register if the Source string has a 
positive sign. For EOSLOAD MINUS this character is placed into the sign 
register if the source string has a negative Sign. 


Notes: 


1. EOSLOAD FILL is used to setup check protection (* instead of 
space). 


2. EOSLOAD SIGN is used to setup a floating currency sign. 
3. EOSLOAD PLUS is used to setup a non-blank plus sign. 


4. EOSLOAD MINUS is used to setup a non-minus minus sign (such as 
CR, DB, or the PL/I +). 
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EOS SIGNIF Significance 
Purpose: 
Control the significance (leading zero) indicator 
Format: 
pattern 
Operation: 
PSW<C> <- @; !EOSCLEAR_SIGNIF 
PSW<C> <- 1; !EOSSET SIGNIF 


Pattern operators: 


G2 EOSCLEAR_SIGNIF Clear Significance 
G3 EOSSET SIGNIF Set Significance 
Description: 


The significance indicator is set or cleared. This controls’ the 
treatment of leading zeros (leading zeros are zero digits for which the 
Significance indicator is clear). 


Notes: 
1. EOSCLEAR SIGNIF is used to initialize leading zero suppression 
(EOSMOVE) or floating sign (EOSFLOAT) following a fixed insert 
(EOSINSERT with significance set). 


2. EOSSET SIGNIF is used to avoid leading zero suppression (before 
EOSMOVE) or to force a fixed insert (before EOSINSERT). 
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EOSADJUST_ INPUT Adjust Input Length 
Purpose: 


Handle source strings with lengths different from the output 


Format: 
pattern len 
Operation: 
if len EQLU 8 or len GTRU 31 then {UNPREDICTABLE}; 
if R@<15:8> GTRU len 
then 
begin 
RO<31:16> <- @ 
repeat RO<15:8> - len do 
if READ NEQU @ then 
begin 
PSW<Z> <- @; 
PSW<C> <- 1; !'set Significance 
PSW<V> <- 1; 
end; 
end; 
else RO<31:16> <- R®@<15:8> - len; Inegative of number to 
fill 
Pattern operators: 
47 EOSADJUST_ INPUT Adjust Input Length 


Description: 


The pattern operator is followed by an unsigned byte integer length in 
the range 1 through 31. If the source string has more digits than this 
length, the excess leading digits are read and discarded. If any 
discarded digits are non-zero then overflow is set, Significance is Set, 
and zero is cleared. If the source string has fewer digits than this 
length, a counter is set of the number of leading zeros to supply. This 
counter is stored as a negative number in R@#<31:16>. 


Notes: 


If length is not in the range 1 through 31 the destination 
string, condition codes, and R# through R5 are UNPREDICTABLE. 
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EOSEND End Edit 
Purpose: 
End the edit operation 
Format: 
pattern 


Operation: 


exit flag <- true; terminate edit loop 
lend processing is 
'described under EDITPC 
Instruction 


Pattern operators: 


GO EOSEND End Edit 


Description: 
The edit operation is terminated. 
Notes: 


1. If there are still input digits a reserved operand abort is 
taken. 


2. If the source value is -8, the N condition code is cleared. 
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4.14 OTHER VAX-11 INSTRUCTIONS 


The following instructions are specified in other chapters of this 
document as indicated below. 


Instructions 
1. Chapter 5: 
Probe {Read, Write} Accessability 2 
PROBE{R,W} mode.rb, len.rw, base.ab 
2. Chapter 6: 
Change Mode 4 
CHM{K,E,S,U} param.rw, {-(ySP).w*} 
Where y=MINU(x, PSL<current_mode>) 
Return from Exception or Interrupt 1 
REI {(SP)+.r*} 
3. Chapter 7: 
Load Process Context 1 
LDPCTX {PCB.r*, -(KSP) .w*} 
Save Process Context 1 


SVPCTX {(SP)+.r*, PCB.w*} 


4. Chapter 9: 
Move To Process Register 1 
MTPR src.rl, procreg.rl 


Move From Processor Register 1 
MFPR procreg.rl, dst.wl 
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BUG Bugcheck 
Format: 
opcode message.bx 
Operation: 
{fault to report error} 


Condition Codes: 


N <- N; 
Z <-> 23 
V <- V;3 
C <= C;3 


Exceptions: 


reserved instruction 


Opcodes: 
FEFF BUGW Bugcheck with word message identifier 
FDFF BUGL Bugcheck with longword message identifier 


Description: 


The hardware treats these opcodes as RESERVED to DIGITAL and faults. 
The VAX/VMS operating system treats these as requests to report software 
detected errors. The in-line message identifier is zero extended to a 
longword (BUGW) and interpreted as a condition value (see Appendix C, 
VAX/VMS Run Time Library Reference Manual). If the process is 
privileged to report bugs, a log entry is made. If the process is not 
privileged, a reserved instruction is signalled. 


BLANK 


CHAPTER 5 
MEMORY MANAGEMENT 


17-Jun-81 -- Rev 5.3 


5.1 INTRODUCTION 


Memory management consists of the hardware and software which control 
the allocation and use of physical memory. Typically, in a 
multiprogramming system, Several processes may reside in physical memory 
at the same time. The VAX-1ll uses memory protection and multiple 
address spaces to ensure that one process will not affect other 
processes or the operating system. 


To further improve software reliability, four hierarchical access modes 
provide memory access control. They are, from most to least privileged: 
kernel, executive, Supervisor, and user. Protection is specified at the 
individual page level, where a page may be inaccessible, read-only, or 
read/write for each of the four access modes. Any location accessible 
to one mode is also accessible to all more privileged modes. 
Furthermore, for each access mode, any location that can be written can 
also be read. 


The CPU generates virtual addresses when an image is executed. However, 
before these addresses can be used to access instructions and data, they 
must be translated into physical addresses. Memory management’ software 
maintains tables of mapping information (page tables) that keep track of 
where each 512-byte virtual page is located in physical memory. The CPU 
utilizes this mapping information when it translates virtual addresses 
to physical addresses. 


Therefore, memory management is the scheme that provides both the memory 
protection and memory mapping mechanisms of the VAX-l1l. The memory 
management meets several development goals: 


1. Provide a large address space for instructions and data. 


2. Allow data structures up to one gigabyte. 
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3. Provide convenient and efficient sharing of instructions’ and 
data. 


4. Contribute to software reliability. 


A virtual memory system provides a large address space, yet allows 
programs to run on hardware with small memory configurations. Programs 
execute in an environment termed a process. The virtual memory system 
for VAX-11l provides each process with a 4 billion byte address space. 


The virtual address space is divided into two equal size spaces, the 
system address space and the per-process address space. The system 
address space is the same for all processes. It contains the operating 
system which is written as callable procedures. Thus all system code 
can be available to all other system and user code via a simple CALL. 
Each process has itS own separate process address space. However, 
several processes may have access to the same page, thus’7 providing 
controlled sharing. 


5.2 VIRTUAL ADDRESS SPACE 


A virtual address is a 32 bit unSigned integer specifying a byte 
location in the address space. The programmer sees a linear array of 
4,294,967,296 bytes. The virtual address space is broken into 512 byte 
units termed pages. The page is the unit of relocation and protection. 


This virtual address space is too large to be contained in any presently 
available main memory. Memory management provides the mechanism to map 
the active part of the virtual address space to the available physical 
address space. Memory management also provides page protection between 
processes. The operating system controls’ the virtual-to-physical 
address mapping tables, and swaps the inactive but used parts of the 
virtual address space onto the external storage media. 


The virtual address space is divided into two parts. The half with the 
smaller addresses, known as "per-process space," is distinct for each 
process running on the system. The half with the larger addresses, 
Known as "system space," is shared by all processes. Virtual address 
space is illustrated in Figure 5-l. 
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+------—-----—- +--+ + 
G2OGBGBGH | | 
| length of P®@ Region | 
| in pages (P@LR) | 
| | p 
| PQ | e 
| (Program) 9 -------------------------- | r 
| Region | = 
| | P® Region | Pp 
| | growth direction | r 
| | fo) 
|3FFFFFFF Vv | Cc 
Se aa rrr rrr eee ee + e 
|400AG0000 . | S 
| | | S 
| | Pl Region | 
| | growth direction | S 
| Pl | | ) 
| (Control) =  -------------------------- | a 
| Region | Cc 
| length of Pl Region | e 
| in pages (2**21-P1LR) | 
| | 
TFFFFFFF | | 
aa a ee oe Sees sae ieee es Saas oo es ee ere eee aes ee es ee as et ee 
8BHBGGHOB | | 
| length of System Region | 
| Ss, in pages (SLR) | 
| Region = seen r renner ene | 
| | S 
| | y 
| | | S 
| | System Region | t 
| | growth direction | e 
|BFFFFFFF Vv | m 
ee + 
|COGGB000 | S 
| | Pp 
| | a 
| | c 
| | e 
| Reserved | 
| Region | 
| | 
| | 
| | 
FFFFFFFF | | 
$——--------- +--+ + 
Figure 5-1 


Virtual Address Space 
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5.2.1 Process Space 


The smaller-addressed half (addresses QOOOGGOGG-7FFFFFFF, hex) of the 
virtual address space is termed "per-process space." The per-process 
Space is divided into two equal parts, the program region (P@~ region) 
and the control region (Pl region). Each process has a separate address 
translation map for per-process space, so the per-process spaces of all 
processes are completely disjoint (see the section on Sharing at the end 
of this chapter). The address map for per-process space is context 
Switched (changed) when the process running on the system is changed 
(see the chapter on Process Structure). 


5.2.2 System Space 


The larger-addressed half (addresses 8@00009000-FFFFFFFF, hex) of the 
virtual address space is termed "system space." All processes use the 
same address translation map for system space, So system space is shared 
among all processes. The address map for system space is not context 
switched. 


5.2.3 Virtual Address Format 


The VAX-l1l processor generates a 32-bit virtual address for each 
instruction and operand in memory. As the process executes, the system 
translates each virtual address to a physical address. The virtual 
address has the following format: 


3 
1 9 8 g 
+------------—-—-—------ -- -- - - - - - - - - - - - - - - - - - $+—-—-------~--------- + 
| VPN | byte # | 
$---------------------- -- ----- - - --- ----------- $+—----------------- + 
Figure 5-2 
Virtual Address Format 
VPN <31:9> The Virtual Page Number field specifies the 
virtual page to be referenced. The virtual 


address space contains 8,388,608 (2**23) pages 
of 512 bytes each. 


Byte # <8:@> The byte number field specifies the byte address 
within the page. A page contains 512 bytes. 


When bit 31 is one, the address is in the system space. When bit 31 is 
zero, the address is in the per-process space. 


Within the per-process space, bit 38 distinguishes between the program 
and control regions. When bit 38 is one, the control region is 
referenced, and when it is zero, the program region is referenced. 
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5.2.4 Virtual Address Space Layout 


The layout of virtual address space is illustrated in Figure 5-1. Note 
that access to each of the three regions (P@, Pl, System) is controlled 
by a length register (P@OLR, PILR, SLR). Within the limits set by the 
length registers, the access is further controlled by page tables that 


specify the validity, access requirements, and physical location of each 
page in the memory. 


5.3 MEMORY MANAGEMENT CONTROL 


The action of translating a virtual address to a physical address is 
governed by the setting of the Memory Mapping Enable (MME) bit in the 
MAPEN internal procesSor register. Figure 5-3 illustrates the 
privileged MAP ENable register. 


3 

1 1 @ 
fo ---- ee ee +--+ +- 
| IM| 
| MBZ IMI 
| [E | 
ns al a a a i a telat a ee a re a eres —_ 

Figure 5-3 


MAP ENable Register (MAPEN) 
( to read: MFPR #56, dst.wl ) 
( to write: MTPR srce.rl, #55 ) 


MAPEN<@> is the Memory Mapping Enable (MME) bit. When MME is set to 1, 
memory management is enabled. When MME is set to @, memory management 


is disabled. At processor initialization time, MAPEN is initialized to 
0. 


5.3.1 Memory Management Disabled 


Setting MME to @ turns off address translation and access control. 
Virtual address bit n, VA<n>, is copied directly to the corresponding 
physical address bit, PA<n>, for n = 8 to 29. VA<31:30> are ignored; 
PA<31:30> are alwayS zero. VA<n> is ignored if PA<n> doesn't exist. 
(The number of PA bits is implementation dependent. )’ 


PA = VA<K29:8> modulo (2** number of PA bits) 


There is no page protection: all accesses are allowed in all modes. No 
modify bit is maintained. 
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5.4 ADDRESS TRANSLATION 
When MME is al, address translation and access control are on. The 
processor uses the following to determine whether an intended access is 
allowed: 

1. The virtual address, which is used to index a page table, 

2. The intended access type (read or write), and 

3. The current privilege level from the Processor Status Longword, 

or Kernel level for page table mapping references. 

If the access is allowed and the address can be mapped, the result is 
the physical address corresponding to the specified virtual address. 
The intended access is READ if the operation to be performed is a read. 
The intended access is WRITE if the operation to be performed is a 
write. If the operation to be performed is a modify (that is, read 


followed by write) the intended access is specified as a WRITE. 


If an operand is an address operand, then no reference is’ made. Hence 
the page need not be accessible and need not even exist. 


5.4.1 Page Table Entry (PTE) 


The CPU uses a Page Table Entry (PTE) to translate virtual addresses’ to 
physical addresses. Figure 5-4a illustrates the PTE format. 


3 3 2222222 2 
1 @ ie ie 54321 @ y 
+-+-------+-+-+4--- t-+—-+----------------- ---- ----- -- - -- ---------- + 
lvl PROT Ii Zlownis 181 PFN | 
+-+-------+- Haha tha tan th rr eee + 
Figure 5-4a 
Page Table Entry 
V <31> Valid bit - governs the validity of the M bit 
and PFN field. V=l1 for valid; V=@ for not 
valid. When V=0, the M and PFN fields’ are 
reserved for DIGITAL software. 
PROT <30:27> PROTection field - this field is always valid 
and is used by the CPU hardware even when V=@. 
M <26> Modify bit - When the Valid bit is clear, M is 


not used by CPU hardware, and is reserved for 
DIGITAL software and I/0 devices. When the 
Valid bit is set, M shows whether the page has 
been modified. If M is clear, the page has not 
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been modified. If M is set, the page may have 
been modified. 


M is cleared only by software. It is set by CPU 
hardware on a successful write or modify to the 
page. In addition, it may be set by the 
probe-write instruction (PROBEW) or by = an 
implied probe-write. M is not set if tthe page 
is inaccessible. Beyond that, it is 
UNPREDICTABLE whether M is set if a fault occurs 
in an instruction which would otherwise have 
modified the page. 


For example, if a write reference crosses a page 
boundary where the first page is not accessible 
and the second page is accessible, the reference 
will fault. M is unchanged in the PTE mapping 
the first page. It is UNPREDICTABLE whether ™ 
is set in the PTE mapping the second page. 


Tt is UNPREDICTABLE whether the modification of 
a process PTE<XM> bit causes modification of the 
system PTE that maps that process page table. 
Note that the update of the M bit is not 
interlocked in a multiprocessor system. 


OWN <24:23> OWNer bits - reserved for DIGITAL software use 
as the access mode of the owner of the page 
(that is, the mode allowed to alter the page 
protection or to delete the page); not examined 
or altered by any hardware. 


PFN <20:0> Page Frame Number - the upper 21 bits of the 
physical address of the base of the page. Used 
by CPU hardware only if V=l. 


Z <25> Zero bit - bit 25,is RESERVED to DIGITAL and 
must be zero. The hardware does not necessarily 
test that this bit is zero because the PTE is 
established by privileged software. 


S <€22:21> Software bits - bits 22, and 21 are reserved for 
DIGITAL software. 


(Software symbols defined for the above fields use PTES as the prefix.) 


The operating system software useS Some combinations of the software 
bits to implement its page management data structures and functions. 
Among the functions implemented this way are 
initialize-pages-with-zeros, copy-on-reference, page Sharing, and 
transitions between active and sSwapped-out' states. VAX/VMS encodes 
these functions in PTES whose Valid bit, PTE<31>, is a @ and processes 
them whenever a page fault occurs. 
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5.4.2 Page Table Entry (PTE) For I/O Devices 


Some I/O devices, such as the DR32, use VAX-1l1 memory management’ to 
translate addresses. These I/0 devices use a Page Table Entry format 
which is an extenSion of that in Figure 5-4a used by the CPU. The 
extended PTE implements for I/0 hardware some functions that the CPU 
does with software using software bits and page faults. In particular, 
PTE bits 31, 26, and 22 are decoded into four combinations. Some of 
these are used in the same way as in the CPU PTE format, and some are 
used in different ways. The four combinations are: 


PTE<31,26,22> PTE Type 


x Valid PFN 

y Valid PFN 

1 Global Page Table Index 
x Invalid, I/O abort 


QaQaod Fe 
eMQaax 


and their interpretations are: 


PTE<31,26,22>=1xx, Figure 5-4b. PTE<2@:0> is a valid PFN field. This 
is identical to the PFN field illustrated in Figure 5-4a for the CPU 
PTE. 


3 3 22222222 

1 @ 76543218 0 
+-+------- $a+—-+—---+-4+-4+--------- --- -- - - - - - - - - - - - - - - - - - + 
[1] PROT |MI|IZIOWNISIS| PFN | 
+-+------- +—+-4+—---4+-4+-+------------- --------- -- -- -- -- ----------- + 


Figure 5-4b 
PTE<31,26,22>=1xx, Valid PFN 


PTE<31,26,22>=090, Figure 5-4c. PTE<20:8> is a valid PFN field. This 
is identical to the PFN field illustrated in Figure 5-4a for the CPU 
PLE 


3 3 22:2 229-2°9 

1 @ 765432149 Q 
-+------- tata tn nn hata hn rrr rere reer + 
[9] PROT |@IZIOWNI®OIS] PFN | 
+—+------- +—-+—-+---+-+-+-------------------- -- - - - - - - - - - - - -- -- + 


Figure 5-4c 
PTE<31,26,22>=009, Valid PEN 


PTE<31,26,22>=001, Figure 5-4d. PTE<21:0> is a Global Page Table Index 
(GPTX). The I/0 device has a Global page table Base Register (GBR) 
which is loaded by software with a system virtual address. The I/0 
device calculates GBR + GPTX * 4 to get the system virtual address of a 
second PTE. The second PTE must contain a valid PFN, and must have 
PTE<31,26,22> equal to either 688 or 1lxx, binary. If either of these 
requirements is not met, the result is UNDEFINED. For those devices 
that use it, the PROTection field always comes from the first PTE. 
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Figure 5-4d 
PTE<31,25,22>=881, Global Page Table Index 


PTE<31,26,22>=01x, Figure 5-4e. This PTE format is RESERVED to DIGITAL. 
I/O devices will abort in a DEVICE DEPENDENT manner. 


3 3 22-22: 2-22-92 

1 @ 7654321 8 g 
+-+------- tata t— ttt + 
I@| PROT |1/Z|lOwWNISIS| S | 
4+-+------- +—-+4+—-4+---4+-+-+4+------------------- -- --- --- - - - - - - -- -- -- + 


Figure 5-4e 
PTE<31,26,22>=01x, Invalid, I/O abort 


I/O devices may look at and check the PROTection field or modify the M 
bit; this is DEVICE DEPENDENT. Those devices that do use them, use 
them the same way the CPU does. 


I/O devices that do memory mapping use the same SPT as the CPU, but they 
have their own copies of the SBR and SLR. Buffer addresses are 
described in terms of a system virtual address of the PTE for the first 
buffer page and ae byte offset within that page. In addition the I/0 
devices use a Global Page Table in memory and an I/O hardware Global 
page table Base Register (GBR) which must be loaded by software. 


5.4.3 Changes To Page Table Entries 


The operating system changes PTES aS part of itS memory management 
functions. For example, VMS sets and clears the valid bit and changes 
the PFN field as pages are Swapped in and out. 


The software must guarantee that each PTE is alwayS consistent within 
itself. Changing a PTE one field at a time may give incorrect system 
operation. An example would be to set PTE<XV> with one instruction 
before establishing PTE<PFN> with another. An interrupt routine between 
the two instructions could use an address that would map using the 
inconsistent PTE. The software can solve this problem by building a new 
PTE in a register and then moving the new PTE to the page table with a 
Single instruction such as MOVL. 


Multiprocessing makes the problem more complicated. Another processor, 
be it another CPU or an I/O processor, can reference the same page 
tables that the first CPU is changing. The Second processor must always 
read consistent PTEs. In order to guarantee this, first note that PTEsS 
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are longwords, longword-aligned. Then two requirements must be met: 


1. Whenever the software modifies a PTE in more than one byte, it 
must use a longword, longword-aligned, write-destination 
instruction, such as MOVL, and 


2. The hardware must guarantee that a longword, longword-aligned 
write is an "atomic" operation. That is, a second processor 
cannot read (or write over) any of the first processor's 
partial results. 


5.5 ACCESS CONTROL 


Access control is the function of validating whether a particular type 
of memory access is to be allowed to a particular page. Access to each 
page is controlled by a protection code that specifies for each access 
mode whether or not read or write references are allowed. Additionally, 
each address is checked to make certain that it lies within the P@, Pl, 
or system region. 


5.5.1 Processor Modes 


In the order of most privileged to least privileged, the four processor 
modes are: 


® - Kernel - used by the kernel of the operating system for page 
management, scheduling, and I/O drivers. 


1 - Executive - used for many of the operating system. service 
calls, including the record management system. 


2 —- Supervisor - used for such services aS command interpretation. 


3 - User - used for user. level code, utilities, compilers, 
debuggers, etc. 


The access mode of a running process is the current processor mode, 
Stored in the Current Mode field of the Processor Status Longword (PSL) 
(see the Chapter on Exceptions and Interrupts). 


5.5.2 Protection Code 


Every page in the virtual address space is protected according to its 
use. Even though all of the system space is shared, in that the program 
may generate any address, the program may be prevented from modifying, 
Or even accessing portions of it. A program may also be prevented from 
accessing or modifying portions of per-process space. 
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For example, in system space, scheduling queues are highly protected, 
whereas library routines may be executable by code of any privilege. 
Similarly per-process accounting information may be in per-process 
space, but highly protected, while normal user code in per-process 
spaces is executable at low privilege. 


Associated with each page iS a protection code that describes’ the 
accessibility of the page for each processor mode. The code allows a 


choice of protection for each processor mode, within the following 
limits: 


1. Each level's access can be read-write, read-only, or no-access. 


2. If any level has read access then all more privileged levels 
also have read access. 


3. If any level has write access then all more privileged levels 
also have write access. 


The protection codes for the 15 combinations of page protection are 
encoded in a 4 bit field in the Page Table Entry as follows: 
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CODE MNEMONIC PRIVILEGE LEVEL COMMENT 
DECIMAL BINARY K E S U 
BBO NA = = - = no ACCESS 
1 G01 UNPREDICTABLE RESERVED 
2 8810 KW RW = = = 
3 9811 KR R - - - 
4 G100 UW RW RW RW RW ALL ACCESS 
5 1061 EW RW RW = = 
6 G110 ERKW RW R - - 
7 §111 ER R R = - 
8 1800 SW RW RW RW = 
9 16901 SREW RW RW R = 
10 1810 SRKW RW R R - 
ll 1911 SR R R R = 
12 1108@ URSW RW RW RW R 
13 1101 UREW RW RW R R 
14 1110 URKW RW R R R 
15 l1i1l UR R R R R 
Key 

- - no access K - Kernel 

R - read only E - Executive 

RW - read write S - Supervisor 

U - User 
Figure 5-5 


Protection Mnemonics 


(Software symbols are defined by using PTESK_ as a prefix to the above 
mnemonics.) 


This encoding was chosen to simplify hardware access checking for 
implementations not using a table decoder. The access is allowed if: 


{CODE NEQU @} AND 
{{CODE EQLU 4} OR {CM LSSU WM} OR {READ AND {CM LEQU RM}}} 


CM 1S current processor mode 
RM is left 2 bits of code 
WM is one's complement of right 2 bits of code 
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5.5.3 Length Violation 


Every valid virtual address lies within bounds determined by the 
addressing region (P@, Pl, or System) and the associated length register 
(POLR, PILR, or SLR). Virtual addresses outside these bounds cause a 


length violation. The addressing bounds algorithm is a simple limit 
check whose formal notation is: 


case VAddr<31: 30> 
set 
[O]: 'PQ@ region 
if ZEXT( VAddr<29:9> ) GEQU P®@LR 
then {length violation}; 
[1]: !'Pl region 
if ZEXT( VAddr<29:9> ) LSSU P1LR 
then {length violation}; 
[2]: !S region 
1f ZEXT( VAddr<29:9> ) GEQU SLR 
then {length violation}; 
[3]: !reserved region 
{length violation}; 
tes; 


5.5.4 Access Control Violation Fault 


An access control fault occurs if an illegal access is attempted, as 


determined by the current PSL mode and the page's protection field, or 
if the address causes a length violation. 


5.5.5 Access Across A Page Boundary 
If an access is made across a page boundary, the order in which the 


pages are accessed is UNPREDICTABLE. However, for a given page, access 
control violation always takes precedence over translation not valid. 


5.5.6 System Space Address Translation 


A virtual address with <31:30>=2 is an address in the system virtual 
address space. 
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Figure 5-6 
System Virtual Page Format 


The system virtual address space is defined by the System Page Table 
(SPT), which iS a vector of Page Table Entries (PTES). The SPT is 
always located in physical address space. The base address of the SPT 
is also a physical address and is contained in the System Base Register 
(SBR). The size of the SPT in longwords (that is, the number of PTEs) 
is contained in the System Length Register (SLR). The SBR points to the 
first PTE in the SPT. In turn, this PTE maps the first page of System 
Space, that is, virtual byte address 89900008 (hex). 


The PTES in the System Page Table contain the mapping information 
themselves, or point to the mapping information in the Global Page Table 
if the PTE is in GPTX format. (See the section on PTEsS for I/O devices 
for a description of the GPTX format.) 


3 3 2 
1 @ 9 21 @ 
4+---4}-------------- -- -- - - - - - - - - - - - - - - - - - +—-—-—+ 
|MBZ | Physical Longword Address |MBZ | 
$---4}------------------- --- - - -- - - - - - - - - - - - - - + +--—+ 
Figure 5-7 
System Base Register (SBR) 
( to read: MEFPR #12, dst.wl ) 
( to write: MTPR srce.rl, #12 ) 
3 22 
l 21 4 
$---------~~---~-~-~-- panne ee ee + +--+ ++ + 
| MBZ | Length of SPT in longwords | 
+—-—-—---—-------------- fo—-—-—----—-—--- - - - -- - - - - - - - - - - - - - - - - - - - - + 


Figure 5-8 
System Length Register (SLR) 
( to read: MFPR #13, dst.wl ) 
( to write: MTPR src.rl, #13 ) 


Bits <31:9> of the virtual address contain the Virtual Page Number. 
However, system virtual addresses have VAddr<31:30>=2. Thus, there 
could be as many as 2**21 pages in the system region. (Typically the 
value is in the range of a few hundred to a few thousand system pages; 
see the section at the end of this chapter on Sharing.) The length field 
in the System Length Register requires 22 bits to express the values @ 
through 2**21 inclusive. At processor initialization time, the contents 
of both registers are UNPREDICTABLE. Figure 5-9 illustrates’ the 
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translation of a system virtual address to a physical address. 


es ee 
1089 9 8 Q 
+---+4-------------------- $+—-------- + 
SVA: | 2 | | byte | 
(System Virtual i cae a mm aD aod PeSasSee= + 
Address) Extract and | | 
3 212 Check Length | | 
i 3|2 2110 | 
+-------- +-------------------- +--+ | 
| 9 | | @| | 
+-------- +-------------------- +--+ | 
| 
Add | 
| 
| 
+—----------------------------- +--+ | 
SBR: | Phys Base Adr of SPT | o| | 
+----------------------------- +--+ | 
| 
Yields | 
| 
+----------------------------- +--+ | 
| Phys Adr of PTE | | | 
$—-------------~---------------- +--+ | 
| 
Fetch | 
3 3 2 2 | 
1 @ 1 @ 0 | 
+-+-------- 4-------------------- + | 
PTE: [1] | PFN | | 
+-4+-------- $-------------------- + | 
check access | | ! 
3 3/2 | | 
1 819 9|8 V @ 
+---+4+-------------------- +-------- + 
Physical Adr of Data: | @ | | | 
+---4+-------------------- +-------- + 
Figure 5-9 


System Virtual to Physical Translation 


The algorithm to generate a physical address from a system region 
virtual address is: 


SYS PA = (SBR+4*SVA<K29:9>) <26:0>'SVAK<8: O> 'System Region 
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Note 


For all occurrences within this 


chapter, the parentheses indicate 
“contents of," the angle brackets 
indicate referenced bits, and_ the 


apostrophe indicates concatenation. 


5.5.7 Process Space Address Translation 


The process virtual address space is divided into two equal sized, 
separately mapped regions. If virtual address bit 38 is 60, the address 
is in region P@. If virtual address bit 38 is al, the address is in 
region Pl. 


The P®@ region maps a virtually contiguouS area that begins at the 
smallest address (08) in the process virtual space and grows in the 
direction of larger addresses. 


P@ is typically used for program images and can grow dynamically. 


The Pl region maps a virtually contiguouS area that begins at the 
largest address (2**31 - 1) in the process virtual space and grows in 
the direction of smaller addresses. 


Pl is typically used for system-maintained, per-process context. It may 
grow dynamically for the user stack. 


Bach region is described by a virtually contiguous vector of Page Table 
Entries. Unlike the System Page Table, which is addressed with a 
physica] address, these two page tables are addressed with virtual 
addresses in the system region of the virtual address space. Thus, for 
per-Process Space, the address of the PTE is a virtual address in System 
Space and the fetch of the PTE is simply a longword fetch using a system 
virtual address. 


There 1S a Significant reason to address process page tables in virtual 
rather than physical space. A physically addressed process page table 
that required more than a page of PTEs (that is, that mapped more than 
64K bytes of process virtual space) would require physically contiguous 
pages. Such a requirement would make dynamic allocation of process page 
table space very awkward since a running system tends to fragment 
storage into page-Sized areas. 


A process space address translation that causes a translation buffer 
miss will cause one memory reference for the process PTE. If the 
virtual address of the page containing the process PTE is also missing 
from the translation buffer, a second memory reference is required. 
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When a process Page Table Entry is fetched, a reference is made _ to 
System Space. This reference is made as a kernel read. Thus the system 
page containing a process page table is either "No Access" (that is, 
protection code zero) or will be accessible (protection code non-zero). 
Similarly, a check is made against the System page table Length Register 
(SLR). Thus, the fetch of an entry from a process page table can result 
in access or length violation faults (see the section on Faults. an 

Parameters). 


5.5.8 P@ Region 


The P®@ region of the address space is mapped by the P@ Page Table (PQOPT) 
which is defined by the P@ Base Register (P@BR) and the P@ Length 
Register (P@LR). The P@BR contains a virtual address in the system 
region which is the base address of the P®@ Page Table. Figure 5-19 
illustrates the P@ Base Register. The POLR contains the size of the 
P@PT in longwords, that is, the number of Page Table Entries. Figure 
5-ll illustrates the P@ Length Register. The Page Table Entry addressed 
by the P@ Base Register maps the first page of the PY region of the 
virtual address space, that is, virtual byte address @. 


The PTES in the PS Page Table contain the mapping information 
themselves, or point to the mapping information in the Global Page Table 
if the PTE is in GPTX format. (See the section on PTEsS for I/O devices 
for a description of the GPTX format.) 


3 3 2 
1@9 21 @ 
+---+--------------------------- ---- - - - - - - - - - - - - - - - - - + $+—--—+ 
| 2 | System Virtual Longword Address |MBZ | 
$---+}-—--------------- - - - -- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - +---+ 
Figure 5-19 
P@ Base Register (P@BR) 
( to read: MEFPR #8, dst.wl ) 
( to write: MTPR Srce.rl, #8 ) 
3 22 2222 
1 7 6 4321 9) 
+--------- +----- $—---+----------- - - - - - - - - - - $$ 5 + 
| MBZ | IGN |MBZ| Length of PO@PT in longwords | 
+—--------- +----- $—-—-+--------------- - -- - - - - - - - - - - - - - - - - - - - - + 


Figure 5-ll 
P@ Length Register (P@LR) 
( to read: MEFPR #9, dst.wl ) 
( to write: MTPR src.rl, #9 ) 


The Virtual Page Number is contained in bits <29:9> of the virtual 
address. A 22-bit length field is required to express the values @ 
through 2**21 inclusive. There could be as many as 2**21 pages in the 
P@ region. 
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POLR<26: 24> are ignored on MTPR and read back @ on MFPR. At processor 
initialization time, the contents of both registers are UNPREDICTABLE. 
An attempt to load P@BR with a value less than 2**31 or greater than 
2**3] + 2**39 - 4 results in a reserved operand fault in = some 
implementations. Figure 5-12 illustrates the P@ virtual address’ to 
physical address translation. 
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3.3 2 
169 9 8 @ 
+---+-------------------- $-------- + 
PVA: | o | | byte | 
(Process Virtual a a cae sa oe ar + 
Address) | | | 
3 2\2 Extract and | | 
1 3}2 Check Length 2]10 | 
+-------- $—-—------------------- +--+ | 
| Y) | | ol | 
+—-------- $-------------------- +--+ | 
| 
| 
Add | 
+—----------------------------- +--+ | 
PQOBR: | Sys Virt Base Adr of POPT | @| | 
$—---------------------------- +--+ | 
| 
Yields | 
+--------------—--------------- +—-—+ | 
| Sys Virt Adr of PTE | Ol | 
$o----------- - +--+ + +--+ | 
| 
Fetch by System Space | 
translation algorithm, | 
including length and | 
Kernel mode access checks | 
| 
33 3 2 2 | 
1 @ 1 @ 4 | 
+-+-------- 4+-------------------- + | 
PTE: 1] | PFN | | 
+-+-------- $+—-------------------- + | 
check access | this access check | | 
| in current mode | | 
| | | 
3 3/2 | | 
1 619 9/3 V @ 
+—---}+-------------------- $—-------- + 
Physical Adr of Data: | @ | | | 
$———4+-—-—----------------- $o-—------- + 


Figure 5-12 
P§@ Virtual to Physical Translation 


The algorithm to generate a phySical address from a P@ region virtual 
address is: 


PVA _PTE = POBR+4*PVA<29: 9> 1P@ Region 
PTE PA = (SBR+4*PVA_PTE<29:9>) <20:0>'PVA_PTE<8: @> 
PROC PA = (PTE PA)<20:9>'PVA<8: > 
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5.5.9 Pl Region 


The Pl region of the address space is mapped by the Pl Page Table (P1PT) 
which is defined by the Pl Base Register (P1BR) and the Pl Length 
Register (P1LR). Because Pl space grows towards smaller addresses, and 
because a consistent hardware interpretation of the base and length 
registers is deSirable, P1IBR and PILR describe the portion of Pl space 
that is NOT accessible. Figure 5-13 illustrates the Pl Base Register. 
Figure 5-14 illustrates the Pl Length Register. Note that P1LR contains 
the number of nonexistent PTEsS. P1BR contains a virtual address of what 
would be the PTE for the first page of Pl, that is, virtual byte address 
A4GOOBOGBH (hex). 


The address in P1BR is not necessarily an address in System Space, but 
all the addresses of PTES must be in System Space. 


The PTEs in the Pl Page Table contain the mapping information, or point 
to the mapping information in the Global Page Table if the PTE is in 
GPTX format. (See the Section on PTEs for I/O devices for a description 
of the GPTX format.) 


3 
1 2186 
+------------------- +--+ + + ee $—-—-—+ 
| Virtual Longword Address |MBZ | 
+-------------—--—------ - - - - - - - - - - - - - - - - - - - - - + f———+ 
Figure 5-13 
Pl Base Register (P1BR) 
( to read: MFPR #10, dst.wl ) 
( to write: MTPR src.rl, #10 ) 
3 3 2 2 
1 @ 24 Q 
+-+-----~------------ pon en He 5 + +--+ + 
[I | MBZ | 2**21 - Length of P1PT in longwords | 
4+-4+--------—--------- fo————---— - - - - - - - - ++ + 


Figure 5-14 
Pl Length Register (P1LR) 
( to read: MFPR #11, dst.wl ) 
( to write: MTPR src.rl, #11 ) 


PILR<31> is ignored on MTPR and reads back @ on MFPR. At processor 
initialization time, the contents of both registers are UNPREDICTABLE. 
An attempt to load P1IBR with a value less than 2**31 - 2**23 (7F800000, 
hex) or greater than 2**31 + 2**3Q9 - 2**23 - 4 results in a reserved 
operand fault in some implementations. 
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3 3 2 
1 @ 9 9 8 Gg 
$—-—--+-------------------- +—------- + 
PVA: | 1 | | byte | 
(Process Virtual SA aa a aa ae a lata faa + 
Address) | Extract and | | 
3 212 Check Length | | 
1 3|2 2116 | 
+-------- $——----------- - - - +——+ | 
| 0 | | O| | 
+—-------- +—-------------------- +--+ | 
Add | 
| 
$----------------------------- +——+ | 
P1BR: | Sys Virt Adr of PI1PT | ol | 
$—-—--—-------------------------- +--+ | 
| 
Yields | 
| 
+----------------------------- +--+ | 
| Sys Virt Adr of PTE | | | 
te  e- +--+ | 
Fetch by System Space | 
translation algorithm, | 
including length and | 
Kernel mode access checks | 
| 
3 3 2 2 | 
1 @ 1 @ B | 
+-+-------- $+—-------------------- + | 
PTE: 1 | | PFN | | 
$—+—---- = $a nnn nn nn = + | 
check access | this access check | | 
| in current mode | ! 
| | 
3 3/2 | | 
1 @|9 9/8 V @ 
+---4+—-------------------- $—-------- + 
Physical Adr of Data: | @ | | | 
+—---4+—-—------------------- $-------- + 


Figure 5-15 
Pl Virtual to Physical Translation 


The algorithm to generate a physical address from a Pl region virtual 
address is: 


PVA PTE = P1BR+4*PVA<29:9> !1P1 Region 
PTE PA = (SBR+4*PVA_PTE<29:9>) <20:9>'PVA_PTE<8: > 
PROC PA = (PTE PA)<20:0>'PVA<8: > 
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5.6 TRANSLATION BUFFER 


In order to Save actual memory references when repeatedly referencing 
the same pages, a hardware implementation may include a mechanism to 
remember successful virtual adadress translations and page states. Such 
a mechanism is termed a translation buffer. 


When the process context is loaded with LDPCTX, the translation buffer 
is automatically updated (that is, the process virtual address 
translations are invalidated). However, when the software changes’ any 
part of a valid Page Table Entry for the system or a current process 
region, it must also move a virtual address within the corresponding 
page to the Translation Buffer Invalidate Single (TBIS) register with 
the MTPR instruction. Figure 5-16 illustrates the TBIS register. 


Additionally, when the software changes a System Page Table Entry which 
maps any part of the current process page table, all process pages so 
mapped must be invalidated in the translation buffer. They may be 
invalidated by moving an address within each Such page into the TBIS 
register. They may also be invalidated by clearing the entire 
translation buffer. This is done by moving @ to the Translation Buffer 
Invalidate All (TBIA) register with the MTPR instruction. Figure 5-17 
illustrates the TBIA register. 


The translation buffer must not store invalid PTEs. Therefore, the 
software is not required to invalidate translation buffer entries when 
making changes for PTEs that are already invalid. 


When the location or Size of the system map is changed (SBR, SLR) the 
entire translation buffer must be cleared. 


Whenever Memory Management Enable (MME) is a 6, the contents of the 
translation buffer are UNPREDICTABLE. Therefore, before enabling memory 
Management at processor initialization time, or any other time, the 
entire translation buffer must be cleared. 


Figure 5-16 
Translation Buffer Invalidate Single (TBIS) 
( to write: MTPR src.rl, #58 ) 
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Figure 5-17 
Translation Buffer Invalidate All (TBIA) 
( to write: MTPR src.rl, #57 ) 


An internal processor register iS available for interrogating the 
presence of a valid translation in the translation buffer. When a 
virtual address is written to the TBCHK register with a MTPR 
instruction, the condition code V bit is set if the translation buffer 
holds a valid translation for that virtual page. The specification of 
the TBCHK register is based on VAX/VMS usage. The TBCHK register is 
reserved for Digital use. Its specification is subject to change 
without prior notice. 


5.7 FAULTS AND PARAMETERS 


Two types of faults are associated with memory mapping and _ protection 
(see the chapter on Exceptions and Interrupts for a description of 
faults). <A Translation Not Valid Fault is taken when a read or _ write 
reference is attempted through an invalid PTE (PTE<31>=@). An Access 
Control Violation Fault is taken when the protection field of the PTE 
indicates that the intended page reference in the specified access mode 
would be illegal. Note that these two faults have distinct vectors in 
the System Control Block. If both faults could occur, then the Access 
Control Violation Fault takes precedence. An Access Control Violation 
Fault is also taken if the virtual address referenced is beyond the end 
of the associated page table. Such a "length violation" is essentially 
the same as referencing a PTE that specifies "No Access" in its 
protection field. To avoid having the fault software recompute the 
length check, a "length violation" indication is stored in the fault 
parameter word illustrated in Figure 5-18. 


3 

1 210 
$—------------------- +--+ -- - - - - - - - - - - +—+-+-+ 
| Q IMIPIL| : (SP) 
$—-—----------------- ---- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - ---- +—+-+-+ 
| some virtual address in the faulting page | 
$—---------— +--+ ~~ + ee = = + 
| PC of faulting instruction | 
$—--------~+~--+--- +--+ +--+ +--+ + 
| PSL at time of fault | 
$—-----------~---~~-~~~-~~-------- - - - - - - - - - - - - - - - - - = + 

Figure 5-18 


Fault Parameter Block 
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The same parameters are stored for both types of fault. The first 
parameter pushed on the stack after the PSL and PC is some virtual 
address in the same page with the virtual address that caused the fault. 
A Process Space reference can result in a System Space virtual reference 
for the PTE. If the PTE reference faults, the virtual address that is 
saved is the process virtual address. In addition, a1 is stored in bit 
1 of the fault parameter word if the fault occurred in the per-process 
PTE reference. 


The second parameter pushed on the Kernel stack contains the following 
information: 


L <O> Length Violation. Set to 1 to indicate that an 
Access Control Violation was the result of a 
length violation rather’ than a protection 
violation. This bit is always @ for a 
Translation Not Valid Fault. 


P <1l> PTE Reference -— Set to 1 to indicate that the 
fault occurred during the reference to the 
process page table associated with the virtual 
address. This can be set on either length or 
protection faults. 


M <2> Write or Modify Intent - Set to 1 to indicate 
that the program's intended access was a write 
or modify. This bit is @ if the program's 
intended access was a read. 


5.8 PRIVILEGED SERVICES AND ARGUMENT VALIDATION 
5.8.1 Changing Access Modes 
Four instructions allow a program to change its access mode to a more 


privileged mode and transfer control to a service dispatcher for the new 
mode. 


CHMK change mode to Kernel 
CHME change mode to Exec 
CHMS change mode to Super 
CHMU change mode to User 


These instructions, described in detail in the chapter on Exceptions and 
Interrupts, provide the normal mechanism for less privileged code to 
call more privileged code. When the mode transition takes place, the 
previous mode is saved in the Previous Mode field of the PSL, thus 
allowing the more privileged code to determine the privilege of its 
caller. 


Memory Management 
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5.8.2 Validating 


Two instructions, 
addresses passed 
system, a service 
caller could have 
(see the appendix 


Address Arguments (PROBE instructions) 


PROBER and PROBEW, allow privileged services to check 
aS parameters. To avoid protection holes in the 
routine must always verify that its less' privileged 
directly referenced the addresses passed as parameters 
on Address Validation Rules). The PROBE instructions 


do this verification. 
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PROBEX PROBE ACCESSIBILITY 


Purpose: 
verify that arguments can be accessed 


Format: 
opcode mode.rb, len.rw, base.ab 


Operation: 
probe mode <- MAXU (mode<1:@>, PSL<PRV_MOD>) 
condition codes <- {accessibility of base} and 
{accessibility of {base+ZEXT (len) -1}} 
using probe mode 


Condition Codes: 


N <- @; 
Z <- if {both accessible} then @ else 1; 
V <- OO; 
C <- C; 


Exceptions: 


translation not valid 


Opcodes: 
GC PROBER Probe Read Accessibility 
OD PROBEW Probe Write Accessibility 


Description: 


The PROBE instruction checks the read or write accessibility of the 
first and last byte specified by the base address and the zero extended 
length. Note that the bytes in between are not’ checked. System 
software must check all pages between the two end bytes if they will be 
accessed. 


The protection is checked against the larger (and therefore less 
privileged) of the modes specified in bits <1:0> of the mode operand and 
the Previous Mode field of the PSL. Note that probing with a mode 
operand of ) is equivalent to probing the mode specified in 
PSL<previous-mode>. 


Example: 
MOVL 4 (AP) ,R@ ;Copy the address of first arg so that 
; it can't be changed. 
PROBER #0,#4, (RO) ;Verify that the longword pointed to by 


; the first arg could be read by the 
; previous access mode. 
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sNote that the arg list itself must 


; already have been probed 

BEQL violation ;Branch if either byte gives an access 
* violation. 

MOVQ 8 (AP) ,R@ ;Copy length and address of buffer args 
; so that they can't change. 

PROBEW #0,R@, (R1) ;Verify that the buffer described by the 


; 2nd and 3rd args could be written by 
; the previous access mode. 

;Note that the arg list must already 

; have been probed and that the 2nd arg 
; must be known to be less than 512. 
;Branch if either byte gives an access 
; violation. 


BEQL violation 


Flows: 


The following flows describe the operation of PROBE on each of the 
virtual addresses it is checking. Note that probing an address returns 
only the accessibility of the page(s) and has no effect on their 
residency. However, probing a process address may cause a page fault in 
the system address space on the per-process page tables. 


1. Look up the virtual address in the translation buffer. If 
found, use the asSociated protection field to determine the 
accessibility and EXIT. 


2. Check for length violation for System or per-Process address as 
appropriate. See elsewhere in this chapter for the length 
violation check flows. If length violation then return No 
Access and EXIT. 


3. If System virtual address, form physical address of PTE, fetch 
the PTE, use the protection field to determine the 
accessibility and EXIT. 


4. For per-Process virtual address, must do a virtual memory 
reference for the PTE. 


1. Look up the virtual address of the PTE in the translation 
buffer, form the physical address of the PTE if found, 
fetch the PTE, use the protection field to determine the 
accessibility and EXIT. 


2. Check the System virtual address of the PTE for length 
violation. If length violation, then return No Access and 
EXIT. 


3. Tl <- Page Table Entry for the page containing the 
per-process PTE. 


4. If the protection field of Tl indicates no access (not even 
readable by Kernel), then return No Access and EXIT. A no 
access, not valid pointer to a page of PTE'sS' conserves 
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D865 


l. 


Storage space for a page full of no access, not valid 
PTE'sS. 


5. If the valid bit in Tl is @0, then take a Translation Not 
Valid Fault and EXIT. This case allows for the demand 
paging of per-process page tables. 


6. Finally, calculate the physical address of the per-process 
PTE from the PFN field of Tl (see the section on System 
Space Address Translation), fetch the PTE, use the 
protection field to determine the accessibility, and EXIT. 


Notes On The PROBE inStructions 


If the Valid bit of the examined Page Table Entry is set, it is 
UNPREDICTABLE whether the Modify bit of the examined Page Table 
Entry is set by a PROBEW. If the Valid bit is clear, the 
Modify bit is not changed. 


Except for 1, above, the valid bit of the Page Table Entry, 
PTE<31>, mapping the probed address is ignored. 


A length violation gives a status of "not-accessible." 


On the probe of a process virtual address, if the valid bit of 
the system Page Table Entry is #8 then a Translation Not Valid 
Fault occurs. This allows for the demand paging of the process 
page tables. 


On the probe of a process virtual address, if the protection 
field of the system Page Table Entry indicates No Access, then 
a status of "not-accessible" is given. Thus, a Single No 
Access Page Table Entry in the system map is equivalent to 128 
No Access Page Table Entries in the process map. 


CHAPTER 6 
EXCEPTIONS AND INTERRUPTS 


12-Dec-8898 -- Rev 7.1 


6.1 INTRODUCTION 


At certain times during the operation of a system, events within the 
system require the execution of particular pieces of software outside 
the explicit flow of control. The processor transfers control by 
forcing a change in the flow of control from that explicitly indicated 
in the currently executing process. 


Some of the events are relevant primarily to the currently executing 
process, and normally invoke software in the context of the current 
process. The notification of such events is termed an exception. 


Other events are primarily relevant to other processes, or to the system 
as a whole, and are therefore serviced in a system-wide context. The 
notification process for these events is termed an interrupt, and_ the 
system-wide context is described as "executing on the interrupt stack" 
(IS). Further, some interrupts are of such urgency that they require 
high-priority service, while others must be synchronized with 
independent events. To tineet these needs, the processor has_ priority 
logic that grants interrupt service to the highest priority event at any 
point in time. The priority associated with an interrupt is termed its 
interrupt priority level (IPL). 
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6.1.1 Processor Interrupt Priority Levels (IPL) 


The processor has 31 interrupt priority levels (IPL), divided into 15 
software levels (numbered, in hex, 801 to OF), and 16 hardware levels (1@ 
to 1F, hex). User applications, system calls, and system services all 
run at process level, which may be thought of as IPL @. Higher numbered 
interrupt levels have higher priority, that is to Say, any requests at 
an interrupt level higher than the processor's current IPL will 
interrupt immediately but requests at a lower or equal level are 
deferred. 


Interrupt levels @1 through @F (hex) exist entirely for use by software. 
No device can request interrupts on those levels, but software can force 
an interrupt by executing MTPR src,#SIRR. (See Chapter 9 and section on 
software generated interrupts later in this chapter). Once a software 
interrupt request is made, it will be cleared by the hardware when the 
interrupt is taken. 


Interrupt levels 10 to 17 (hex) are for use by devices and controllers, 
including UNIBUS devices; UNIBUS levels BR4 to BR7 correspond to VAX-11l 
interrupt levels 14 to 17 (hex). 


Interrupt levels 18 to 1F (hex) are for use by urgent conditions, 
including the interval clock, serious errors, and power fail. 


6.1.2 Interrupts 


The processor arbitrates interrupt requests according to priority. Only 
when the priority of an interrupt request is higher than the current IPL 
(Bits 20:16 of the Processor Status Longword) will the processor’ raise 
the IPL and service the interrupt request. The interrupt service 
routine is entered at the IPL of the interrupt request and will not 
usually change the IPL set by the processor. Note that this is 
different from the PDP-1l where the interrupt vector specifies the IPL 
for the ISR. 


Interrupt requests can come from devices, controllers, other processors, 
or the processor itself. Software executing in kernel mode can raise 
and lower the priority of the processor by executing MTPR src, #IPL 
where src contains the new priority desired; see Chapter 9. However, a 
processor cannot disable interruptsS on other processors. Furthermore 
the priority level of one processor does not affect the priority level 
of the other processors. Thus in multiprocessor systems interrupt 
priority levels cannot be used to synchronize access to_- shared 
resources. Even the various’ urgent interrupts including those 
exceptions that run at IPL 1F (hex) do so on only one processor, thus 
Special software action is required to stop other processors in a 
multiprocessor system. 
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6.1.3 Exceptions 


Most exception service routines execute at IPL @ in response to 
exception conditions caused by the software. A variation from this is 
serious system failures, which raise IPL to the highest level (l1F, hex) 
to minimize processor interruption until the problem is corrected. 
Exception service routines are usually coded to avoid exceptions, 
however nested exceptions can occur. 


A trap is an exception condition that occurs at the end of the 
instruction that caused the exception. Therefore the PC saved on the 
Stack is the address of the next instruction that would normally have 
been executed. Any software can enable and disable some of the trap 
conditions with a single instruction; see the BISPSW and BICPSW 
instructions described in Chapter 4. 


A fault is an exception condition that occurs during an instruction, and 
that leaves the registers and memory in a consistent state such that 
elimination of the fault condition and restarting the instruction will 
give correct results. Note that faults do not always leave everything 
as it was prior to the faulted instruction, they only restore enough to 
allow restarting. Thus, the state of a process that faults may not be 
the same as that of a process that was interrupted at the same point. 


An abort is an exception condition that occurs during an instruction, 
and potentially leaves the registers and memory indeterminate, such that 
the instruction cannot necessarily be correctly restarted, completed, 
Simulated, or undone. 


6.1.4 Contrast Between Exceptions And Interrupts 


Generally exceptions and interrupts are very Similar. When either is 
initiated, both the processor status (PSL) and the program counter (PC) 
are pushed onto the_= stack. However there are seven important 
differences: 


1. An exception condition is caused by the execution of the 
Current instruction while an interrupt is caused by some 
activity in the computing system that may be independent of the 
Current instruction. 


2. An exception condition is usually serviced in the context of 
the process that produced the exception condition, while an 
interrupt is serviced independently from the currently running 
process. 


3. The IPL of the processor is usually not changed when the 
processor initiates an exception, while the IPL is always 
raised when an interrupt is initiated. 
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A. 


Exception service routines usually execute on a_ per-process 
stack while interrupt service routines normally execute on a 
per-CPU stack. 


Enabled exceptions are always initiated immediately no matter 
what the processor IPL is, while interrupts are held off until 
the processor IPL drops below the IPL of the requesting 
interrupt. 


Most exceptions can not be disabled. However, if an exception 
cauSing event occurs while that exception is disabled, no 
exception is initiated for that event even when enabled 
subsequently. This includes overflow which is the _ only 
exception whose occurrence is indicated by a condition code 
(V). I£ an interrupt condition occurs while it is disabled, or 
the processor is at the same or higher IPL, the condition will 
eventually initiate an interrupt when the proper enabling 
conditions are met if the condition is still present. 


The previous mode field in the PSL is always set to Kernel on 
an interrupt, but on an exception it indicates the mode of the 
exception. 
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6.2 PROCESSOR STATUS 


When an exception or an interrupt is serviced, the processor status must 
be preserved so that the interrupted process may continue normally. 
Basically, this is done by automatically saving the Program Counter (PC) 
and the Processor Status Longword (PSL). These are later restored with 
the Return from Exception or Interrupt instruction (REI). Any other 
Status required to correctly resume an interruptable instruction is 
stored in the general registers. Process context such as the mapping 
information is not saved or restored on each interrupt or exception. 
Instead, it is saved and restored only when process context switching is 
performed. Refer to the LDPCTX and SVPCTX instructions in chapter 7. 
Other processor status is changed even less frequently; refer to the 
privileged register descriptions in chapter 9. 


The Processor Status Longword (PSL) is a longword consisting of a _ word 
of privileged processor statuS concatenated with the Processor Status 
Word (PSW). Refer to chapter 2 for a description of the PSW. The PSL 
is automatically saved on the stack when an exception or interrupt 
occurs and is saved in the PCB on a process context switch. The PSL can 
also be stored by the MOVPSL instruction; refer to chapter 4. (The 
terms current PSL and saved PSL are used to distinguish between this 
status information when it is in the processor and when copies of it are 
materialized in memory.) 


Bits <31:21> of the current PSL can be changed explicitly only by 
executing a return from exception or interrupt instruction (REI). REI 
considers the current mode when restoring the PSL, and faults if a 
program attempts to increase its privilege by this means. Thus REI is 
available to all software including user exception handling routines. 


33-2 22:2 272.22 2.2 11 

1098 765432186 6 5 87654321 8B 
tata tea ta tat $a a a th eh tate tae te tae tata tat 
Ic|T | |F|I|CURIPRVIM| | IDIFILTITINIZIVICI 
IMIP|IMBZ|P1S|MOD|MOD|B| IPL | MBZ Iviuiv!] | | | tod 
| I | ID] | | |Z | ee ee ee ee ee | 
ta—t—t— $4 $$ ta ta tet tt ttt tt 
\ / 

\ / 

+----------- PSW----------- + 


Processor Status Longword 


At bootstrap time, PSL is cleared except for IPL and IS. 
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Bits 
3:@ 


4 


15:8 


20:16 


21 


22:23 


25: 24 


Description 
Condition Codes: N, Z, V, C (See chapter 2) 


Trace enable (T). When set at the beginning of an 
instruction, causes TP to be set. When TP is set at the end 
of an instruction, a trace fault is taken before the execution 
of the next instruction. When TP is clear, no trace exception 
occurs. Most programs should treat T as UNPREDICTABLE because 
it is set by debuggers and trace programs for tracing and for 
proceeding from a breakpoint. 


Integer Overflow trap enable (IV). When set, forces an 
integer overflow trap after execution of an instruction that 
produced an integer result that overflowed or had a conversion 
error. When IV is clear, no integer overflow trap occurs. 
(However, the condition code V bit is still set.) 


Floating Underflow exception enable (FU). When set, forces a 
floating underflow exception after execution of the 
instruction that produced an underflowed result (i.e., a 
result exponent, after normalization and rounding, less than 
the smallest representable exponent for the data type). When 
FU is clear, no exception occurs. On the original VAX-11/789@ 
a trap occurS; on all other VAX processors a fault occurs. 


Decimal Overflow trap enable (DV). When set, forces a decimal 
overflow trap after execution of an instruction that produced 
an overflowed decimal (numeric string, or packed decimal) 
result (i.e., no room to store a non-zero digit) or had a 
conversion error. When DV is clear, no trap occurs. 
(However, the condition code V bit is still set.) 


Reserved to DIGITAL, must be zero. 


Interrupt Priority Level (IPL). The current processor 
priority, in the range @ to 1F (hex). The processor will 
accept interrupts only on levels greater than the current 
level. At bootstrap time, IPL is initialized to 1F (hex). 


Reserved to DIGITAL, must be zero. 
Previous Access Mode (PRV_MOD). Loaded from current mode _ by 
exceptions and CHMx instructions, cleared by interrupts, and 


restored by REI. 


Current Access Mode (CUR MOD). The access mode of the 
currently executing process, as follows: 


0 - KERNEL 

1 - EXECUTIVE 
2 —- SUPERVISOR 
3 - USER 
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26 


27 


29: 28 


39 


31 


Interrupt Stack (IS). When set the processor is executing’ on 
the interrupt stack. Any mechanism that sets IS also clears 
current mode and raises IPL above 8. If an REI attempts’ to 
restore a PSL with IS=l and non-zero current mode or zero IPL, 
a reserved operand fault is taken. When clear, the processor 
is executing on the stack specified by current mode. At 
bootstrap time, IS is set. 


First Part Done (FPD). When set, execution of the instruction 
addressed by PC cannot simply be started at the beginning, and 
must be restarted at some other, implementation specific, 
point in its operation. If FPD is set and the exception or 
interrupt Service routine modifies FPD, the general registers, 
or the saved PSL (except for T or TP), the results of the 
restarted instruction's execution are UNPREDICTABLE. If a 
routine sets FPD, the resultS are also UNPREDICTABLE. 
However, if software is simulating unimplemented instructions, 
it may make free use of FPD in its simulation. If the 
hardware encounters a reserved instruction with FPD set, a 
reserved instruction fault is taken with the saved PSL<FPD> 
set. 


Reserved to DIGITAL, must be zero. 


Trace Pending (TP). Forces a trace fault when set at_ the 
beginning of any instruction. Set by the processor if T is 
set at the beginning of an instruction. Any exception or 
interrupt service routine clearing TP must also clear T or the 
tracing of the interrupted instruction, if any, is 
UNPREDICTABLE. 


Compatibility Mode (CM). When set the processor is in PDP-1l 
compatibility mode (see chapter 18). When CM is clear, the 
processor is in native mode. 
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6.3 INTERRUPTS 


The processor services interrupt requests between instructions. The 
processor also services interrupt requests at well defined points during 
the execution of long, iterative instructions such as_ the_ string 
instructions. For these instructions, in order to avoid saving 
additional instruction state in memory, interrupts are initiated when 
the instruction state can be completely contained in the registers, PSL, 
and PC. 


The following events cause interrupts: 

1. Device completion (IPL 198-17 hex) 

2. Device error (IPL 18-17 hex) 

3. Device alert (IPL 10-17 hex) 

4, Device memory error (IPL 18-17 hex) 

5. Console terminal transmit and receive (IPL 14 hex) 

6. Interval timer (IPL 18 hex) 

7. Recovered memory or buS or processor errors (implementation 
specific, IPL 18 to 1D _ hex); The VAX-11/788 processor 


interrupts at 1B on memory errors. 


8. Unrecovered memory or bus or processor errors (implementation 
Specific, IPL 18 to 1D hex) 


9. Power fail (IPL 1E hex) 
19. Software interrupt invoked by MTPR #SIRR (IPL 61 to OF hex) 


ll. AST delivery when REI restores a PSL with mode greater than or 
equal to ASTLVL (See chapter 7) (IPL @2) 


Each device controller has a separate set of interrupt vector locations 
in the system control block (SCB). Thus interrupt service routines do 
not need to poll controllers in order to determine which controller 
interrupted. The vector address for each controller is fixed by 
hardware. 


In order to reduce interrupt overhead, no memory mapping information is 
changed when an interrupt occurs. Thus the instructions, data, and 
contents of the interrupt vector for an interrupt service routine must 
be in the system address space or present in every process at the same 
address. 
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6.3.1 Urgent Interrupts -- Levels 18-1F (Hex) 


The processor provides 8 priority levels for use by urgent conditions 
including serious errors (e.g., machine check) and power fail. 
Interrupts on these levels are initiated by the processor upon detection 
of certain conditions. Some of these conditions are not interrupts. 
For example, Machine Check is uSually an exception but it runs at a high 
priority level on the interrupt stack. 


Interrupt level 1E (hex) is reserved for power fail. Interrupt level l1F 
(hex) is reserved for those exceptions that must lock out all processing 
until handled. This includes the hardware and software "disasters" 
(machine check and kernel stack not valid). It might also be used to 
allow a kernel mode debugger to gain control on any exception. 


6.3.2 Device Interrupts -- Levels 10-17 (Hex) 


The processor provides 8 priority levels for use by peripheral devices. 
Any given implementation may or may not implement all 8 levels of 
interrupts. The minimal implementation is levels 14-17 (hex) that 
correspond to the UNIBUS levels BR4 to BR7 if the system has a UNIBUS. 
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6.3.3 Software Generated Interrupts -- Levels @1-@0F (Hex) 


6.3.3.1 Software Interrupt Summary Register - The processor provides 15 
priority interrupt levels for use by software. Pending software 
interrupts are recorded in the Software Interrupt Summary Register 
(SISR). The SISR contains 1's in the bit positions corresponding to 
levels on which software interrupts are pending. All such levels, of 
course, must be lower than the current processor IPL, or the processor 
would have taken the requested interrupt. 


3 lil 

1 6 5 1 @ 
fo—-—---------—-- --- - - - - -- - - - $o------ - - - - - - - - - - - - - +—+ 
| | Pending Software Interrupts |M| 
| MBZ | |B | 
| IFEDCBAQI8T765 43 2 112 
$—-—--—------ — — - - etapa tate tat ita tatataetatetat 


Software Interrupt Summary Register 


The SISR is a read/write privileged register accessible only to 
privileged software (see Chapter 9). At bootstrap time, the contents of 
SISR is cleared. The mechanism for accessing it is: 


MFPR #SISR,dst Reads the software interrupt Summary register. 


MTPR src,#SISR Loads it, but this is not the normal way of 
making software interrupt requests. It is 
useful for clearing the software interrupt 
system, and for reloading its state after a 
power fail, for example. 


6.3.3.2 Software Interrupt Request Register - The software interrupt 
request register (SIRR) iS a write-only four bit privileged register 
used for making software interrupt requests. 


| ignored |request| 
$a------- + +--+ +--+ $o------ + 


Software Interrupt Request Register 


Executing MTPR src,#SIRR requests an interrupt at the level specified by 
src<3:0>. Once a software interrupt request is made, it will be cleared 
by the hardware when the interrupt is taken. If src<3:@> is greater 
than the current IPL, the interrupt occurs before execution of the 
following instruction. If src<3:8> is less than or equal to the current 
IPL, the interrupt will be deferred until the IPL is lowered to less 
than src<3:9> and that there is no higher interrupt level pending. This 
lowering of IPL is by either REI or by MTPR x,#IPL. I£ src<3:@> is @, 
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no interrupt will occur. 


Note that no indication is given if there is already a request at the 


selected level. Therefore, the Service routine must not assume that 
there iS a one-to-one correspondence of interrupts generated and 
requestS made. A valid protocol for generating such a correspondence 


is: 


1. The requester uses INSQUE to place a control block describing 
the request onto a queue for the service routine. 


2. The requester uses MTPR src,#SIRR to request an interrupt at 
the appropriate level. 


3. The service routine uses REMQUE to remove a control block from 
the queue of service requests. If REMQUE returns failure 
(nothing in the queue), the service routine exits with REI. 


4. If REMQUE returns success (an item was removed from the queue), 
the service routine performs the service and returns to step 3 
to look for other requests. 


6.3.4 Interrupt Priority Level Register 


Writing to the IPL with the MTPR instruction will load the processor 
priority field in the Program Status Longword (PSL), that is, PSL<26:16> 
is loaded from IPL<4:0>. Reading from IPL with the MFPR- instruction 
will read the processor priority field from the PSL. On writing IPL 
bits <31:5> are ignored, on reading IPL bits <31:5> are returned zero. 


| ignored; returns @ IPSL<20:16>| 
$------------------ -- -- + -- - -- -- - - - -- - 5 - - + + $—---------- + 


Interrupt Priority Level Register 
At bootstrap time, IPL is initialized to 31 (l1F, hex). 


Interrupt Service routines must follow the discipline of not lowering 
IPL below their initial level. If they do, an interrupt at an 
intermediate level could cause the stack nesting to be improper. This 
would reSult in REI faulting . Actually, a Service routine could lower 
the IPL if it ensures that no intermediate levels could interrupt, 
however this is probably unreliable code. 
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6.3.5 Interrupt Example 


As an example, assume the procesSor iS running in response to. an 
interrupt at IPL5, it then sets IPL to 8, and then posts software 
requests at IPL3, IPL7, and IPL9. Then a device interrupt arrives at 
IPL11 (hex). Finally IPL is set back to IPLS5. The sequence of 
execution is: 


State after event IPL in 


event contents of IPL SISR PSL on 
(hex) (hex) stack 

(initial) 5 g Q 
MTPR #8,#IPL 8 i) Q 
MTPR #3,#SIRR 8 8 iy 
MTPR #7,#SIRR 8 88 4) 
MTPR #9,#SIRR interrupts to 9 88 8,9 
device interrupts to 11 88 9,8,@ 
device service routine REI 9 88 8,0 
IPL9 service routine REI 8 88 s) 
MTPR #5,#IPL changes IPL to 5 

and the request for 7 is 

granted immediately 7 8 5,0 
IPL7 service routine REI 5 8 g 


initial IPL5 service routine 

REI back to IPL@ and the 

request for 3 is granted 

immediately 3 4) 
IPL3 service routine REI 4 Q -- 
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6.4 EXCEPTIONS 
Exceptions can be grouped into six classes: 
1. Arithmetic traps/faults 
2. Memory management exceptions 
3. Exceptions detected during operand reference 
4, Exceptions occuring aS a consequence of an instruction 
5. Tracing 


6. Serious system failures 
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6.4.1 Arithmetic Traps/Faults 


This section contains the descriptions of the exceptions that occur as 
the result of performing an arithmetic or conversion operation. They 
are mutually exclusive and all are assigned the same vector in the SCB, 
and hence the same Signal "reason" code. Each of them indicates that an 
exception had occurred during the last instruction and that’ the 
instruction has been completed (trap) or backed up (fault). An 
appropriate distinguishing code is pushed on the stack as a longword: 


SE i ag hs ee + 
| type code | : (SP) 
Sa a a es + 
| PC of next instruction to execute* | 
eee eee ase ee eee eee eo See ee ee + 
| PSL | 
eee oe Seep e eee eee See ee eee ee eee Se ee eee Semana + 


*same as the instruction causing exception in case of fault 


type code exception type software mnemonic 
(hex) 
TRAPS 
i integer overflow SRMSK_INT_OVF T 
2 integer divide by zero SRMSK_INT DIV. T 
3 floating overflow SRMSK_FLT OVF T 
4 floating/decimal divide by zero SRMSK_ FLT DIV T 
5 floating underflow SRMSK_ FLT UND T 
6 decimal overflow SRMSK_DEC OVF T 
7 subscript range SRMSK_SUB_ RNG T 
FAULTS 
8 floating overflow SRMSK_FLT OVF F 
9 floating divide by zero SRMSK_FLT DIV F 
A floating underflow SRMSK_FLT UND F 


6.4.1.1 Integer Overflow Trap - An’ integer overflow trap is an 
exception that indicates that the last instruction executed had an 
integer overflow setting the V condition code and that integer overflow 
was enabled (IV set). The result stored is the low-order part of the 
correct result. N and Z are set according to the stored result. The 
type code pushed on the stack is 1 (SRMSK_INT OVF T). Note that the 
instructions RET, REI, REMQUE, REMQHI, REMQTI, MOVTUC, and BISPSW do not 
cause overflow even if they set V. Also note that the EMODx floating 
point instructions can cause integer overflow. 
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6.4.1.2 Integer Divide By Zero Trap - An integer divide by zero trap is 
an exception that indicates that the last instruction executed had an 
integer zero divisor. The result stored is equal to the dividend and 
condition code V is set. The type code pushed on the stack is 
2 (SRMSK_INT DIV_T). 


6.4.1.3 Floating Overflow Trap - A floating overflow trap is an 
exception that indicates that the last instruction executed resulted in 
an exponent greater than the largest representable exponent for the data 
type after normalization and rounding. The result stored contains a one 
in the Sign and zeros in the exponent and fraction fields. This is a 
reserved operand, and will cause a reserved operand fault if used in a 
subsequent floating point instruction. The N and V condition code bits 
are set and Z and C are cleared. The type code pushed on the stack is 
3 (SRMSK_FLT OVF T). 


6.4.1.4 Divide By Zero Trap - Floating or Decimal String - A floating 
divide by zero trap iS an exception that indicates that the last 
instruction executed had a floating zero divisor. The result stored is 
the reserved operand, as described above for floating overflow trap, and 
the condition codes are set as in floating overflow. 


A decimal string divide by zero trap is an exception that indicates that 
the last instruction executed had a decimal string zero divisor. The 
destination, R@ through R5, and condition codes are UNPREDICTABLE. The 
zero divisor can be either +@ or -@. 


The type code pushed on the stack for both types of divide by zero is 
4 (SRM$K FLT DIV T). 


6.4.1.5 Floating Underflow Trap - A floating underflow trap is an 
exception that indicates that the last instruction executed resulted in 
an exponent less than the smallest representable exponent for the data 
type after normalization and rounding and that floating underflow was 
enabled (FU set). The result stored iS zero. Except for POLYx the N, 
V, and C condition codes are cleared and Z is set. Tn POLYx, the trap 
occurs on completion of the instruction, which may be many operations 
after the underflow. The condition codes are set on the final result in 
POLYx. The type code pushed on the stack is 5 (SRM K_FLT UND T). 


6.4.1.6 Decimal String Overflow Trap - A decimal string overflow trap 
is an exception that indicates that the last instruction executed had a 
decimal string result too large for the destination string provided and 
that decimal overflow was enabled (DV set). The V condition code is 
always set. Refer to the individual instruction descriptions in Chapter 
4 for the value of the result and of the condition codes. The type code 
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pushed on the stack is 6 (SRMSK_DEC OVF T). 


6.4.1.7 Subscript Range Trap - A subscript range trap is an exception 
that indicates that the last instruction was an INDEX instruction with a 
subscript operand that failed the range check. The value of the 
subscript operand is lower than the low operand or greater than the high 
operand. The result is stored in indexout, and the condition codes’ are 
set as if the subscript were within range. The type code pushed on the 
stack is 7 (SRMS$K SUB RNG T). 


6.4.1.8 Floating Overflow Fault - A floating overflow fault is an 
exception that indicates that the last instruction executed resulted in 
an exponent greater than the largest representable exponent for the data 
type after normalization and rounding. The destination was unaffected 
and the saved condition codes are UNPREDICTABLE. The saved PC points to 
the instruction causing the fault. In the case of a POLY instruction, 
the instruction is suspended with FPD set (see Chapter 4 for details). 
The type code pushed on the stack is 8 (SRMSK_ FLT OVF F). 


6.4.1.9 Divide By Zero Floating Fault - A floating divide by zero fault 
is an exception that indicates that the last instruction executed had a 
Floating zero divisor. The quotient operand was unaffected and_ the 
saved condition codes are UNPREDICTABLE. The saved PC points to the 
instruction causing the fault. The type code pushed on the stack is 
9 (SRMSK FLT DIV F). 


6.4.1.18 Floating Underflow Fault - A floating underflow fault is an 
exception that indicates that the last instruction executed resulted in 
an exponent less than the smallest representable exponent for the data 
type after normalization and rounding and that floating underflow was 
enabled (FU set). The destination operand is’ unaffected. The saved 
condition codes are UNPREDICTABLE. The saved PC points to the 
instruction causing the fault. In the case of a POLY instruction, the 
instruction is suspended with FPD set (see Chapter 4 for details). The 
type code pushed on the stack is 18 (SRM K FLT UND F). 
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6.4.2 Memory Management Exceptions 


6.4.2.1 Access Control Violation Fault - An access control violation 
fault is an exception indicating that the process attempted a reference 
not allowed at the access mode at which the process was operating. See 
Chapter 5, Memory Management, for a description of the information 
pushed on the stack as parameters. Software may restart the process 
after changing the address translation information. 


6.4.2.2 Translation Not Valid Fault - A translation not valid fault is 
an exception indicating that the process attempted a reference to a page 
for which the valid bit in the page table was not set. See Chapter 5, 
Memory Management, for a description of the information pushed on the 
Stack aS parameters. Note that if a process attempts to reference a 
page for which the page table entry specifies both Not Valid and Access 
Violation, an Access Control Violation Fault occurs. 
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6.4.3 Exceptions Detected During Operand Reference 


6.4.3.1 Reserved Addressing Mode Fault - A reserved addressing mode 
fault is an exception indicating that an operand specifier attempted to 
use an addressing mode that is not allowed in the situation in which it 
occurred. No parameters are pushed. 


The situations in which each specifier type is reserved are: 


SPECIFIER RESERVED SITUATION 


Short Literal Modify, destination, address 
Source, or within index mode. 


Register Address source or within index mode. 
Index Mode Within index mode, or with PC as index. 


See Chapter 3 for combinations of addressing modes and registers’ that 
cause UNPREDICTABLE results. The VAX-11/78@ processor also faults on 


6.4.3.2 Reserved Operand Exception - A reserved operand exception is an 
exception indicating that an operand accessed has a format reserved for 
future use by DIGITAL. No parameters are pushed. This exception always 
backs up the PC to point to the opcode. The exception service routine 
may determine the type of operand by examining the opcode using’ the 
Stored PC. Note that only the changes made by instruction fetch and 
because of operand specifier evaluation may be restored. Therefore, 
some instructions are not restartable. These exceptions are labelled as 
ABORTsS rather than FAULTs. The PC is always restored properly unless 
the instruction attempted to modify it in a manner that results in 
UNPREDICTABLE results. The PSL other than FPD and TP is not’ changed 
except for the conditon codes, which are UNPREDICTABLE. 


The reserved operand exceptions are caused by: 


1. A floating point number that has the sign bit set and the 
exponent zero except in the POLY table (FAULT) 


2. A floating point number that has the sign bit set and the 
exponent zero in the POLY table (FAULT; see chapter 4 for 
restartability) 

3. POLY degree too large (FAULT) 

4. Decimal string too long (ABORT) 


5. Invalid digit in CVTTP, CVTSP (ABORT) 
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6. Bit field too wide (FAULT) 
7. Invalid combination of bits in PSL restored by REI (FAULT) 


8. Reserved pattern operator in EDITPC (FAULT; see Chapter 4 for 
restartability) 


9. Incorrect source string length at completion of EDITPC (ABORT) 


19. Invalid combination of bits in PSW/MASK longword during RET 
(FAULT) 


ll. Invalid combination of bits in BISPSW/BICPSW (FAULT) 
12. Invalid CALLx entry mask (FAULT) 

13. Invalid register number in MFPR or MTPR (FAULT) 

14. Invalid combinations in PCB loaded by LDPCTX (ABORT) 
15. Unaligned operand in ADAWI (FAULT) 


16. Invalid register contents in MTPR- instructions to some 
registers for Some implementations (FAULT): 


SISR<31:16>'SISR<B> NEQU @ 
POBR<1:0> NEQU @ 

POBR LSSU 2**31 

PO@BR GTRU 2**31+2**36-1 
PIBR<1:0> NEQU @ 

PIBR LSSU 2*¥*31-2¥**23 

PIBR GTRU 2*¥*31+2**39-2**23-1 
POLR<31: 27>'POLR<23: 22> NEQU @ 
PILR<30: 22> NEQU @ 

ASTLVL<2:@> GTRU 4 


17. Invalid operand addresses in INSQHI, INSQTI, REMOHI, or REMOQTI 
(FAULT) 
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6.4.4 Exceptions Occurring As The Consequence Of An Instruction 


6.4.4.1 Opcode Reserved To DIGITAL fault - An opcode reserved to 
DIGITAL fault occurs when the processor encounters an opcode that is not 
Specifically defined, or that requires higher privileges than the 


current mode. No parameters are pushed. Opcode FFFF (hex) will always 
fault. 


6.4.4.2 Opcode Reserved To Customers (and CSS) Fault - An opcode 
reserved to customers fault is an exception that occurs when an opcode 
reserved to the customers or DIGITAL's Computer Special Systems group is 
executed. The operation is identical to the opcode reserved to DIGITAL 
fault except that the event is caused by a different set of opcodes, and 
faults through a different vector. All opcodes reserved to customers 
(and CSS) start with FC (hex), which is the xXFC instruction. If the 
Special instruction needs to generate a unique exception, one of the 
reserved to CSS/Customer vectors should be used. An example might be an 
unrecognized second byte of the instruction. 
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6.4.4.3 Compatibility Mode Exception - A compatibility mode exception 
is an exception that occurs when the processor is in compatibility mode. 


A longword of information is pushed on the stack, which contains a_ code 
as follows: 


) reserved opcode FAULT 
1 BPT FAULT 
2 IOT FAULT 
3 EMT FAULT 
4 TRAP FAULT 
5 illegal instruction FAULT 
6 odd address ABORT 


All other exceptions in compatibility mode occur to the regular VAX-11l 
vector, e.g., Access Control Violation, Translation Not Valid, Memory 
Error, and Machine Check Abort. See chapter 18, Compatibility Mode. 


6.4.4.4 Breakpoint Fault - A breakpoint fault is an exception that 
occurs when the breakpoint instruction (BPT) is executed. No parameters 
are pushed. 


To proceed from a breakpoint, a debugger or tracing program typically 
restores the original contents of the location containing the BPT, sets 
T in the PSL saved by the BPT fault, and resumes. When the breakpointed 
instruction completes, a trace exception will occur (See section on 
tracing). At this point, the tracing program can again re-insert’ the 
BPT instruction, restore T to its original state (usually clear), and 
resume. Note that if both tracing and breakpointing are in progress 
(i.e., if PSL<T> was set at the time of the BPT), then on the trace 
exception both the BPT restoration and a normal trace exception should 
be processed by the trace handler. 
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6.4.5 Tracing 


A trace iS an exception that occurs between instructions when trace is 


enabled. Tracing is used for tracing programs, for performance 
evaluation, or debugging purposes. It is designed so that one and only 
one trace exception occurs’ before the execution of each traced 


instruction. The saved PC on a trace is the address of the next 
instruction that would normally be executed. If a trace fault and a 
memory management fault (or an odd address abort during a compatibility 
mode instruction fetch) occur Simultaneously, the order in which the 
exceptions are taken is UNPREDICTABLE. The trace fault for an 
instruction takes precedence over all other exceptions. 


In order to ensure that exactly one trace occurs per instruction despite 
other traps and faults, the PSL contains two bits, trace enable (T) and 
trace pending (TP). If only one bit were used then the occurrence of an 
interrupt at the end of an instruction would either produce zero or two 
traces, depending on the design. Instead of the PSL<T> bit being 
defined to produce a trap after any other traps or aborts at the end of 
an instruction, the trap effect is implemented by copying PSL<T> to a 
second bit (PSL<TP>) that is actually used to generate the exception. 
PSL<TP> generates a fault before any other processing at the start of 
the next instruction. 


The rules of operation for trace are: 


1. At the beginning of an instruction, if TP is set then a_ trace 
Fault is taken after clearing TP. 


2. TP is loaded with the value of T. 


3. If the instruction faults or an interrupt is serviced, PSL<TP> 
is cleared before the PSL is pushed. The pushed PC is set to 
the start of the faulting or interrupted instruction. 
Instruction execution is resumed at Step l. 


4. If the instruction aborts or takes an arithmetic trap, PSL<TP> 
is not changed before the PSL is pushed. 


5. If an interrupt is serviced after instruction completion and 
arithmetic traps but before tracing is checked for at the start 


of the next instruction, then PSL<TP> is not changed before the 
PSL is pushed. 


The routine entered by a CHMx is not traced because CHMx clears T and TP 
in the new PSL. However, if T was set at the beginning of CHMx the 
saved PSL will have both T and TP set. Trace faults resume with the 
instruction following the REI in the routine entered by the CHMx. An 
instruction following an REI will fault either if T was set when the REI 
was executed or if TP in the saved PSL is set; in both cases TP is set 
after the REI. Note that a trace fault that occurs for an instruction 
following an REI that sets TP will be taken with the new PSL. Thus, 
Special care must be taken if exception or interrupt routines are 
traced. If the T bit is set by a BISPSW instruction, trace faults begin 
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with the second instruction after the BISPSW. 


In addition, the CALLx instructions save a clear T, although T in the 
PSL is unchanged. This is done so that a debugger or trace program 
proceeding from a BPT fault does not get a Spurious trace from the RET 
that matches the CALL. 


The detection of reserved instruction faults occurs after the trace 
fault. The detection of interrupts and other exceptions can occur 
during instruction execution. In this case, TP is cleared before the 
exception or interrupt is initiated. The entire PSL (including T and 
TP) is automatically saved on interrupt or exception initiation and is 
restored at the end with an REI. This makes interrupts and benign 
exceptions totally transparent to the executing program. 
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6.4.5.1 Trace Instruction Summary - The following table shows all of 
the cases of T enabled at the beginning of the instruction, enabled at 
the end of the instruction, and TP set in the popped PSW or PSL for 
ordinary instructions (XXX), CHMx...REI, interrupt or exception...REI, 
CALLx, RETURN, CHMx, REI, BISPSW, and BICPSW: 


Trace exception 


enabled enabled TP bit 
at beg at end at end 
(T) (T) (TP) 
XXX N N N 
Y Y Y 
CHMx...REI N N N 
Y b4 Y 
interrupt or N N N 
exception...REI Y Y Y 
CALLX N N N 
Y Y Y (pushed PSW<T> clear) 
RET N N* N 
N xY* N (no fault before 
next instruction) 
Y N* Y 
Y Y* Y 
CHMx N N N (pushed PSL<TP> clear) 
Y N N (pushed PSL<TP> set) 
REI N N* N 
(if PSL<TP>=@ N Y* N 
on stack) Y N* Y 
Y Y* Y 
REI N N* x 
(if PSL<TP>=1 N Y* Y 
on stack) Y N* ¥ 
Y y* Y 
BISPSW N Y N 
Y 4 Y 
BICPSW N N N 
Y N Y 
interrupt or N N N (pushed PSL<TP> clear) 
exception Y N N (pushed PSL<TP> depends 


on above description) 
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* = depends on PSW<T> popped from stack 


6.4.5.2 Using Trace - Routines using the trace facility are termed 
trace handlers. They should observe the following conventions and 
restrictions: 


l. When the trace handler performs its REI back to the traced 
program, it should always force the T bit on in the PSL that 
will be restored. This defends against programs clearing T via 
RET, REI, or BICPSW. 


2. The trace handler should never examine or alter the TP bit when 
continuing tracing. The hardware flows ensure that this bit is 
maintained correctly to continue tracing. 


3. When tracing is to be ended, both T and TP should be cleared. 
This ensures that no further traces will occur. 


4. Tracing a service routine that completes with an REI will give 
a trace in the restored mode after the REI. If the program 
being restored to was also being traced, only one trace 
exception is generated. 


5. If a routine entered by a CALLx instruction is executed at full 
Speed by turning off T, then trace control can be regained by 
setting T in the PSW in its call frame. Tracing will resume 
after the instruction following the RET, 


6. Tracing is disabled for routines entered by a CHMx instruction 
or any exception. Thus, if a CHMx or exception service routine 
is to be traced, a breakpoint instruction must be placed at its 
entry point. If such a routine is recurSive, breakpointing 
will catch each recursion only if the breakpoint is not on the 
CHMx or instruction with the exception. 


7. «If it is desired to allow multiple trace handlers, all handlers 
Should preserve T when turning on and off trace. They also 
would have to simulate traced code that alters or reads T. 
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6.4.6 Serious System Failures 


6.4.6.1 Kernel Stack Not Valid Abort - Kernel stack not valid abort is 
an exception that indicates that the Kernel stack was not valid while 
the processor was pushing information onto the Kernel stack during’ the 
initiation of an exception or interrupt. Usually this is an indication 
of a stack overflow or other executive software error. The attempted 
exception is transformed into an abort that uses the interrupt stack. 
No extra information is pushed on the interrupt stack in addition to PSL 


and PC. IPL is raised to 1F (hex). Software may abort the process 
without aborting the system. However, because of the lost information, 
the process cannot be continued. If the Kernel Stack is not valid 


during the normal execution of an instruction (including CHMK or REI), 
the normal memory management fault is initiated. If the exception 
vector <1:@> for Kernel Stack Not Valid is 3, the behavior of the 
processor is UNDEFINED (See section on SCB vectors). 


6.4.6.2 Interrupt Stack Not Valid Halt - An interrupt stack not valid 
halt iS an exception that indicates that the interrupt stack was not 
valid or that a memory error occurred while the processor was pushing 
information onto the interrupt stack during the initiation of an 
exception or interrupt. No further interrupt requests are acknowledged 
on this processor. The processor leaves the PC, the PSL, and the reason 
for the halt in registers so that it is available to a debugger, the 
normal bootstrap routine, or an optional watch dog bootstrap routine. A 
watch dog bootstrap can cause the processor to leave the halted state. 


6.4.6.3 Machine Check Exception - A machine check exception indicates 
that the processor detected an internal error in itself. As usual for 
exceptions, this exception is taken independent of IPL. IPL isS-_ raised 
to 1F (hex) only if vector<1:98> is l.. 


Implementation specific information is pushed on the stack as longwords. 
The processor specifies the number of bytes pushed by placing the number 
of bytes pushed as the last longword pushed. (@ if none, 4 if one, 
ee This count excludes the PC, PSL, and count longwords. Software 
can decide, on the basis of the information presented, whether to abort 
the current process if the machine check came from the process. Machine 
check includes uncorrected bus and memory errors anywhere, and any other 
processor-detected errors. Some processor errors cannot ensure the 
State of the machine at ahl. For such errors, the state will be 
preserved on a “best effort" basis. If the exception vector <1:@> for 
machine check is 3, the behavior of the processor is UNDEFINED (see 
section on SCB vectors). 


Exceptions and Interrupts 12-Dec-8@ -- Rev 7.1 Page 6-27 
SERIALIZATION OF NOTIFICATION OF MULTIPLE EVENTS 


6.5 SERIALIZATION OF NOTIFICATION OF MULTIPLE EVENTS 


The interaction between arithmetic traps, tracing, other exceptions, and 
multiple interrupts is complex. In order to ensure consistent and 
useful implementations, it is necessary to understand this interraction 
at a detailed level. As an example, if an instruction is started with 
T=1 and TP=0, it gets an arithmetic trap, and an interrupt request is 
recognized, the following sequence occurs: 


1. The instruction finishes, storing all its results. PSL<TP> is 
set at the end of this instruction since PSL<T> was set at the 
beginning. 


2. The overflow trap sequence is initiated, pushing the PC and PSL 
(with TP=1), loading a new PC from the vector, and creating a 
new PSL. 


3. The interrupt sequence is initiated, pushing the PC and _ PSL 
appropriate to the overflow trap service routine, loading a new 
PC from the vector, and creating a new PSL. 


4. If a higher priority interrupt is noticed, the first 
instruction of the interrupt service routine is not executed. 
Instead, the PC and PSL appropriate to that routine are saved 
as part of initiating the new interrupt. The original 
interrupt service routine will then be executed when the higher 
priority routine terminates via REI. 


5. The interrupt service routine runs, and exits with REI. 


6. The overflow trap service routine runs, and exits with REI, 
which sets PSL<TP> since the saved PSL<TP> was set. 


7. The trace fault occurs, again pushing PC and PSL but this’ time 
with TP=@. 


8. Trace service routine runs, and exits with REI. 


9. The next instruction is executed. 


Exceptions and Interrupts 12-Dec-8989 -- Rev 7.1 Page 6-28 
SERIALIZATION OF NOTIFICATION OF MULTIPLE EVENTS 
This is accomplished by the following operation between instructions: 


‘here at completion of instruction including 
! at end of REI from an exception or interrupt routine 


1S: {possibly take interrupts or console halt}; 
!IPSL<TP> is not modified before PSL is saved 
if PSL<TP> EQLU 1 then !if trace pending, take trace fault. 
begin 'Trace fault takes precedence 
PSL<TP> <- @; lover other exceptions. 
{initiate trace fault}; 
end; 


{possibly take interrupts or console halt}; 
IPSL<TP> is not modified before PSL is saved 


PSL<TP> <- PSL<T>; 'if trace enable, set trace pending 


{go start instruction execution}; 
'Reserved instruction faults are taken here 
!'FPD is tested here, thus TP takes 
! precedence over FPD if both are set. 
if {instruction faults} OR {an interrupt or console halt 
is taken before end of instruction} then 
begin 
{back up PC to start of opcode}; 
{either set PSL<FPD> or back up all general 
register side effects}; 
PSL<TP> <- @; 
{initiate exception or interrupt}; 


if {arith trap needed and no other abort 
or trap} then {initiate arith trap}; 


end; 
note: all instructions end by flowing 


1 
! through 1$, thus the REI from a service 
! routine will return to 1$ 
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6.6 SYSTEM CONTROL BLOCK (SCB) 


The System Control Block is a page containing the vectors by which 
exceptions and interrupts are dispatched to the appropriate service 
routines. 


6.6.1 System Control Block Base (SCBB) 


The SCBB is a privileged register containing the physical address of the 
System Control Block, which must be page-aligned. 


System Control Block Base 


At bootstrap time, the contents of SCBB is UNPREDICTABLE. The actual 
length is implementation dependent because it represents a physical 
address. 


6.6.2 Vectors 


A vector is a longword in the SCB that is examined by the processor when 
an exception or interrupt occurs, to determine how to service the event. 


Separate vectors are defined for each interrupting device controller and 
each class of exceptions. Each vector is interpreted as follows by the 
hardware. Bits 1:8 contain a code interpreted: 


®@. Service this event on the kernel stack unless already running 
on the interrupt stack, in which case service on the interrupt 
stack. 


1. Service this event on the interrupt stack. If this event is an 
exception, the IPL is raised to 1F (hex). 


2. Service this event in writable control store, passing bits 15:2 
to the installation-specific microcode there. If writable 
control store does not exist or is not loaded, the operation is 
UNDEFINED. On the VAX-11/788 processor, the operation in this 
case is a HALT. 


3. Operation UNDEFINED. Reserved to DIGITAL. On the VAX-11/78@ 
processor, the operation is a HALT. 


For codes @ andl, bits 31:2 contain the virtual address of the service 
routine, which must begin on a longword boundary and will ordinarily be 
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in the system space. CHMx is serviced on the stack selected by the new 
mode. Bits <l1:@> in the CHMx vectors must be zero or the operation is 
UNDEFINED. On the VAX-11/788 processor, these bits are ignored in the 
CHMx vectors. 
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System Control Block (exception and interrupt vectors) 


Number of 


Vector Name Type Params 
(hex) 
BO Unused 
G4 Machine Check Abort/ * 
Fault/ 
Trap 
98 Kernel Stack Not Valid Abort y 
BC Power Fail Interrupt @ 
16 Reserved/Privileged Fault 0 
Instruction 
14 Customer Reserved Fault 4) 
Instruction 
18 Reserved Operand Fault/ 4) 
Abort 
1c Reserved Addressing Mode Fault 4) 
20 Access Control Violation Fault 2 


Notes 


Reserved to DIGITAL. 


Processor-and error- 
specific information 
is pushed on the 
Stack, if possible. 
Restartability is 
processor specific. 


If vector<1:@> is l, 

IPL is raised to 1F (hex) 
and the interrupt stack 
is used (i.e. IS <- 1).. 


* -- the number of bytes 
of parameters is pushed 
on the stack and is 
implementation dependent. 


Serviced on the 
interrupt stack 
(i.e. IS <- 1). IPL is 


raised to 1F (hex). 


IPL is raised 
to lE (hex). 


Opcodes reserved to 
DIGITAL and 
privileged instructions. 


XFC instruction. 


Type depends on 
circumstances. See section 
on reserved operand 
exceptions. 


Virtual address 
cauSing fault is 
pushed onto stack. 
See chapter 5. 
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24 Translation Not Valid Fault 2 Virtual address 
cauSing fault is 
pushed onto stack. 
See chapter 5. 


28 Trace Pending (TP) Fault Qg 
2C Breakpoint Instruction Fault 4) 


30 Compatibility Fault/ 1 A type code is pushed 
Abort onto the stack. See section 
on compatibility mode 
exceptions. 


34 Arithmetic Trap/ 1 A type code is pushed 
Fault onto the stack. 
See 6.4. 


38-3C Unused Reserved to DIGITAL. 


4Q CHMK Trap 1 The operand word is 
Sign extended and 
pushed onto the stack. 
Vector<1:8> MBZ. 


44 CHME Trap 1 The operand word is 
Sign extended and 
pushed onto the stack. 
Vector<1:@> MBZ. 


48 CHMS Trap 1 The operand word is 
Sign extended and 
pushed onto the stack. 
Vector<l1:@> MBZ. 


AC CHMU Trap 1 The operand word is 
Sign extended and 
pushed onto the stack. 
Vector<1:0> MBZ. 


50 SBI SILO Compare Interrupt @ IPL is 19 (hex). 
VAX-11/788 only. 


54 Corrected Memory Interrupt * IPL is 1A (hex). 
Read Data Also used for Read Data 
Substitute on VAX-11/780. 
Number of parameters is 
implementation dependent. 


58 SBI Alert Interrupt @ IPL is 1B (hex). 
VAX-11/78@ only. 


5C SBI Fault Interrupt @ IPL is 1C (hex). 
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VAX-11/789 only. 


68 Memory Write Timeout Interrupt * IPL is 1D (hex). 
Number of parameters is 
implementation dependent. 


64-80 Unused Reserved to DIGITAL. 

84 Software Level 1 Interrupt @ 

88 Software Level 2 Interrupt @ Ordinarily used for 
AST delivery. 

8C Software Level 3 Interrupt 9 Ordinarily used for 
Process Scheduling. 

98-BC Software Levels 4-F Interrupt @ 

CO Interval Timer Interrupt @ IPL is 18 (hex). 

C4-DC Unused Reserved to DIGITAL 

E®-EC Unused Reserved to CSS/Customers 

FQ Console Storage Rec. Interrupt @ IPL is 17 (hex). 
VAX-11/75@ only. 

F4 Console Storage Trans. Interrupt @ IPL is 17 (hex). 
VAX-11/75®8 only. 

F8 Console Terminal Rec. Interrupt @ IPL is 14 (hex). 

FC Console Terminal Trans. Interrupt @ IPL is 14 (hex). 

198-3FC Device Vectors Interrupt 9g 


In the VAX-11/788 processor, only interrupt priority levels 14 
to 17 £=(hex) are available to a NEXUS external to the CPU, and 
there is a limit of 16 such NEXUS. A NEXUS is a connection = on 
the SBI, which is the internal interconnection structure. The 
NEXUS vectors are assigned as follows: 


106-13C IPL 14 (hex) NEXUS @-15 
148-17C IPL 15 (hex) NEXUS @-15 
188-1BC IPL 16 (hex) NEXUS 6-15 
1C@-1FC IPL 17 (hex) NEXUS @-15 


In the VAX-11/75@ processor, UNIBUS devices interrupt’ the 
processor directly. The vector is determined by adding 200 
(hex) to the vector supplied by the device. Only SCB vectors in 
the range 208 to 3FC (hex) are allowed. Interrupt priority 
levels 14 to 17 (hex) correspond to UNIBUS levels BR4 to BR/7/. 


Exceptions and Interrupts 12-Dec-898 -- Rev 7.1 Page 6-34 
STACKS 


6.7 STACKS 


At any time, the processor is either in a process context (IS=@) in one 
of four modes (kernel, exec, super, user), or in the system-wide 
interrupt Service context (IS=l) that operates with kernel privileges. 
There is a stack pointer associated with each of these five states, and 
any time the processor changes from one of these states to another, SP 
(R14) is stored in the process context stack pointer for the old state 
and loaded from that for the new state. The process context stack 
pointers (KSP=kernel, ESP=exec, SSP=super, USP=user) are allocated in 
the PCB (see Chapter 7), although some hardware implementations may keep 
them in privileged registers. The interrupt stack pointer (ISP) is ina 
privileged register. 


Operating system design must choose a priority level that is’ the 
boundary between kernel and interrupt stack use. The SCB interrupt 
vectors must be set such that interrupts to levels above this boundary 
run on the interrupt stack (vector<1:@> = 1) and interrupts below this 
boundary run on the kernel stack (vector<1:8> = 96). Typically, AST 
delivery (IPL 2) is on the kernel stack and all higher levels are on the 
interrupt stack. 


6.7.1 Stack Residency 


The USER, SUPER, and EXEC stacks do not need to be resident. The kernel 
can bring in or allocate process stack pages as Address Translation Not 
Valid faults occur. However, the kernel stack for the current process, 
and the interrupt stack (which is process-independent) must be resident 
and accessible. Translation Not Valid and Access Control Violation 
faults occurring on references to either of these stacks are regarded as 
serious system failures, from which recovery is not possible. 


If either of these faults occurs on a reference to the kernel stack, the 
processor aborts the current Sequence and initiates Kernel Stack Not 
Valid abort on hardware level 1F (hex). If either of these faults 
occurs on a reference to the interrupt stack, the processor halts. Note 
that this does not mean that every possible reference is checked, but 
rather that the processor will not loop on these conditions. 


It is not necessary that the kernel stack for processes other than the 
Current one be resident, but it must be resident before a process is 
selected to run by the software's process dispatcher. Further, any 
mechanism that uses Translation Not Valid or Access Control Violation 
faults to gather process statistics, for instance, must exercise care 
not to invalidate kernel stack pages. 
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6.7.2 Stack Alignment 


Except on CALLx instructions, the hardware makes no attempt to align the 
Stacks. For best performance on all processors, the software should 
align the stack on a longword boundary and allocate the stack in 
longword increments. The convert byte to long (CVTBL and MOVZBL), 
convert word to long (CVTWL and MOVZWL), convert long to byte (CVTLB), 
and convert long to word (CVTLW) instructions are recommended for 
pushing bytes and words on the stack and popping them off in order’ to 
keep it longword aligned. 


6.7.3 Stack Status Bits 


The interrupt stack bit (IS) and current mode bits in the privileged 
Processor Status Longword (PSL) specify which of the five stack pointers 
is currently in use as follows: 


IS MODE REGISTER 
1 4) ISP 
") y KSP 
4) 1 ESP 
4) 2 SSP 
3 USP 


The processor does not allow current mode to be non-zero when IS=l1. 
This is achieved by clearing the mode bits when taking an interrupt or 
exception, and by cauSing reserved operand fault if REI attempts to load 
a PSL in which both IS and mode are non-zero. 


The stack to be used for an interrupt or exception is selected by the 
current PSL<IS> and bits <1:@> of the vector for the event as follows: 


vector<1:@> 


GO G1 
+----- +—-—-—---— + 
@ | KSP | ISP | 
PSL<IS> Poa ot ee + 
1 | ISP | ISP | 
+----- a + 


Values 10 (binary) and 11 (binary) of the vector<1:8> are used for other 
purposes. Refer to section on SCB vectors for details. 


6.7.4 Accessing Stack Registers 


Reference to SP (the stack pointer) in the general registers will access 
one of five possible architecturally defined stack pointers; the user, 
Supervisor, executive, kernel, or interrupt stack pointer, depending on 
the values of the current mode and IS bits in the PSL. Some processors 
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might implement these five stack pointers as five internal processor 
registers. On these processors, software can access any of the five 
stack pointers not currently selected by the current mode and IS bits in 
the PSL via the MTPR and MFPR instructions. Results are correct even if 
the stack pointer specified by the current mode and IS bits in the PSL 
is referenced in the processor register space by an MTPR or MFPR 
instruction. If the process stack pointers are implemented as 
registers, then these instructions are the only method for accessing the 
stack pointers of the current process. If the process stack pointers 
are kept only in the PCB, MTPR and MFPR of these registers might not 
access the PCB. See Chapter 9 for conventions to be followed when 
referencing per-process registers that are also in the processor 
register space. 


The internal processor register numbers were chosen to be the same _ as 
PSL<26:24> (see Chapter 9). The previous stack pointer is the same as 
PSL<23:22> unless PSL<IS> is set. If PSL<IS> is set, the previous mode 
cannot be determined from the PSL since interrupts always clear 
PSL<23:22>. At bootstrap time, the contents of all stack pointers’ are 
UNPREDICTABLE. 
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6.8 INITIATE EXCEPTION OR INTERRUPT 


Condition Codes (if vector<l1:@> code is @ or 1): 


N <- @; 
Z <- @; 
V <- @; 
C <- @; 


Exceptions: 


interrupt stack not valid 
kernel stack not valid 


Description: 


The handling is determined by the contents of a longword vector in the 
system control block which is indexed by the exception or interrupt 
being processed. If the processor is not executing on the interrupt 
Stack, then the current stack pointer is saved and the new Stack pointer 
is fetched. The old PSL is pushed onto the new stack. The PC is backed 
up (unless this is an interrupt between instructions or a trap) and is 
pushed onto the new stack. The PSL is initialized to a canonical state. 
IPL is changed if this is an interrupt or if it is an exception with 
vector<1:8> code 1. Any parameters are pushed. Except for interrupts, 
the previous mode in the new PSL is set to the old value of the current 
mode. Finally, the PC is changed to point to the longword indicated by 
the vector<31:2>. 


Notes: 
1. Interrupts are disabled during this sequence. 
2. If the vector<1l:8> code is invalid, the behavior is UNDEFINED. 


3. On an abort, the saved condition codes are UNPREDICTABLE. On a 
fault or interrupt, the saved condition codes are 
UNPREDICTABLE; they are only saved to the extent necessary to 
ensure correct completion of the instruction when resumed. On 
an abort or fault or interrupt that sets FPD, the general 
registers except PC, SP and FP are UNPREDICTABLE unless the 
instruction description specifies a setting. If FP is the 
destination in this case, then it is also UNPREDICTABLE. On a 
Kernel Stack Not Valid abort, both SP and FP are UNPREDICTABLE. 
In this case, UNPREDICTABLE means unspecified; upon REI the 
instruction behavior and results are predictable. This implies 
that processes stopped with FPD set cannot’ be resumed on 
processors of a different type or engineering change level. 


4. If the processor getS an Access Control Violation or a 
Translation Not Valid condition while attempting to push 
information on the kernel stack, a Kernel Stack Not Valid abort 
is initiated and IPL is changed to 1F (hex). The additional 
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information, if any, associated with the original exception is 


lost. However PSL and PC are pushed on the interrupt stack 
with the same values as would have been pushed on the _ kernel 
Stack. 


5. If the processor getS an Access Control Violation or a 
Translation Not Valid condition while attempting to push 
information on the interrupt stack, the processor is halted and 
only the state of ISP, PC, and PSL is insured to be correct for 
subsequent analysis. The PSL and PC have the values that would 
have been pushed on the interrupt stack. 


6. The value of PSL<TP> that is saved on the stack is as follows: 


fault clear 

trace clear 

interrupt Clear (if FPD set) 

from PSL<TP> (if after traps, before trace) 

abort from PSL<TP> 

trap from PSL<TP> 

CHMx from PSL<TP> 

BPT, XFC clear 

reserv.instr. clear 


7. The value of PC that is saved on the stack points to the 
following: 


Fault instruction faulting 

trace next instruction to execute 
i.e. instruction at the beginning of which 
the trace fault was taken. 


interrupt instruction interrupted or 
next instruction to execute 
abort instruction aborting or 


detecting Kernel Stack Not Valid 
(not ensured on machine check) 


trap next instruction to execute 
CHMx next instruction to execute 
BPT, XFC BPT, XFC instruction 
reserv.instr. reserv.instr. 


8. The non-interrupt stack pointers may be fetched and stored by 
hardware in either privileged registers or in their allocated 
Slots in the PCB. Only LDPCTX and SVPCTX always fetch and 
Store in the PCB, see Chapter 7. MFPR and MTPR always fetch 
and store the pointers whether in registers or the PCB. 
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6.9 RELATED INSTRUCTIONS 


REI Return from Exception or Interrupt 
Format: 

Opcode 
Operation: 


tmpl <- (SP)+; 


! 
tmp2 <- (SP)+; ! and PSL 


if {tmp2<CUR_MOD> 
{tmp2<IS> EQLU 
{tmp2<IS> EQLU 
{tmp2<IS> EQLU 


-- Rev 7.1 


Pick up saved PC 


LSSU PSL<CUR MOD>} OR 

1 AND PSL<IS> EQLU @} OR 
1 AND tmp2<CUR_MOD> NEQU 9} OR 
1 AND tmp2<IPL> EQLU @} OR 
{tmp2<IPL> GTRU @ AND tmp2<CUR MOD> NEQU 6} OR 


{tmp2<PRV MOD> LSSU tmp2<CUR MOD>} OR 


{tmp2<IPL> GTRU PSL<IPL>} OR. 
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{tmp2<PSL MBZ> NEQU 0} then {reserved operand fault}; 
if {tmp2<CM> EQLU 1} AND 
{{tmp2<FPD,1IS,DV,FU,IV> NEQU 0} OR 


if PSL<IS> EQLU 1 then ISP <- SP 


else PSL<CUR_MOD> SP <- SP; 
if PSL<TP> EQLU 1 then tmp2<TP> <- T; 


PC <- tmpl; 
PSL <- tmp2; 
1f PSL<IS> EQLU @ then 


begin 
SP <- PSL<CUR MOD> SP; 


if PSL<CUR_MOD> GEQU ASTLVL 
then {request interrupt at IPL 2}; 


end; 


{check for software interrupts}; 
{clear instruction look-ahead} 


Condition Codes: 


N <- 
a. <> 
V<- 
C <= 


Exceptions: 


saved PSL<3>; 
saved PSL<2>; 
saved PSL<1)>; 
saved PSL<@>; 


reserved operand 


Opcodes: 


G2 REI 


Return from Exception or 


{tmp2<CUR_MOD> NEQU 3}} then {reserved operand fault}; 


!'save old stack pointer 


!switch stack 
!'check for AST delivery 


Interrupt 


ITP <- TP or stack TP 


Exceptions and Interrupts 12-Dec-898 -- Rev 7.1 Page 6-49 
RELATED INSTRUCTIONS 


Description: 


A longword is popped from the current stack and held in a temporary PC. 
A second longword is popped from the current’ stack and held in a 
temporary PSL. Validity of the popped PSL is’ checked. The current 
stack pointer is saved and a new stack pointer is selected according to 
the new PSL CUR _MOD and IS fields (see section on Stack Status Bits). 
The level of the highest privilege AST is checked against the current 
mode to see whether a pending AST can be delivered; refer to chapter 7. 
Execution resumes with the instruction being executed at the time of the 
exception or interrupt. Any instruction lookahead in the processor is 
reinitialized. 


Notes: 


1. The exception or interrupt service routine is responsible for 


restoring any registers saved and removing any parameters from 
the stack. 


2. As usual for faults, any Access Violation or Translation Not 


Valid conditions on the stack pops restore the stack pointer 
and fault. 


3. The non-interrupt stack pointers may be fetched and _ stored 
either in privileged registers or in their allocated slots in 
the PCB. Only LDPCTX and SVPCTX always fetch and store in the 
PCB (see Chapter 7). MFPR and MTPR always fetch and store the 
pointers whether in registers or the PCB. 
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RELATED 


Purpose: 


Format: 


INSTRUCTIONS 
CHM Change Mode 
request services of more privileged software 


opcode code.rw 


Operation: 


tmpl <- {mode selected by opcode (K=@, E=l1, S=2, U=3)}; 


tmp2 <- MINU(tmpl, PSL<CUR_MOD>); Imaximize privilege 
tmp3 <- SEXT (code); 

if {PSL<IS> EQLU 1} then HALT; lillegal from I stack 
PSL<CUR_MOD> SP <- SP; !'save old stack pointer 
tmp4 <- tmp2 SP; !get new stack pointer 
PROBEW (from tmp4-1 through tmp4-12 with mode=tmp2) ; !check 


! new stack access 
if {access control violation} then 
{initiate access violation fault}; 
if {translation not valid} then 
{initiate translation not valid fault}; 


{initiate CHMx exception with new_mode=tmp2 
and parameter=tmp3 
uSing 40+tmpl*4 (hex) as SCB offset 
using tmp4 as the new SP 
and not storing SP again}; 


Condition Codes: 


N <- @; 
Z <~- @; 
V <- @; 
C <- QO; 


Exceptions: 


Opcodes: 


halt 

CHMK Change Mode to Kernel 
CHME Change Mode to Executive 
CHMS Change Mode to Supervisor 


CHMU Change Mode to User 
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Description: 


Change Mode instructions allow processes to change their access mode in 
a controlled manner. The instruction only increases privilege (i.e., 
decreases the access mode). 


A change in mode also results in a change of stack pointers; the old 
pointer is saved, the new pointer is loaded. The PSL, PC, and code 
passed by the instruction are pushed onto the stack of the new mode. 
The saved PC addresses the instruction following the CHMx instruction. 
The code is sign extended. After execution, the new stack's appearance 
is: 


ee ee ae ee eee ae ere Se Ee ye NL ey Se ae Eee Pee eRe ee eee + 
| sign extended code | : (SP) 
Presa se tes oe eee esa eS look ae soe ee eee eee ee eee ees + 
| PC of next instruction | 
HES eases ate oe ate eee ee a ae + 
| old PSL | 
eee Se ata ht if 


The destination mode selected by the opcode is used to obtain a location 
From the System Control Block. This location addresses the CHMx 
dispatcher for the specified mode. If the vector<l:@> code NEQU @ then 
the operation is UNDEFINED. 


Notes: 


1. As usual for faults, any Access Violation or Translation Not 
Valid fault saves PC, PSL, and leaves SP as it was at the 
beginning of the instruction except for any pushes’ onto’ the 
kernel stack. 


2. The non-interrupt stack pointers may be fetched and_ stored 
either in privileged registers or in their allocated slots in 
the PCB. Only LDPCTX and SVPCTX always fetch and store in the 
PCB, see Chapter 7. MFPR and MTPR always fetch and store the 
pointers whether in registers or the PCB. 


3. By software convention, negative codes are reserved to CSS and 
customers. 


Examples: 


CHMK #7 ;request the kernel mode service 
; specified by code 7 


CHME #4 ;request the executive mode service 
; Specified by code 4 


CHMS #-2 ;request the Supervisor mode service 
; Specified by customer code -2 
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6.10 PROCESSOR STATE TRANSITION TABLE 


FINAL STATE 


\ User Super Exec Kernel Kernel Kernel Program 
INITIAL] IS=0 IS=6 IS=6 IS=9 IS=0 IS=l Halt 
STATE | IPL=0 IPL=@ IPL=@ IPL=0 IPL>@ IPL>@ 

+-------- +-------- +-------- +-------- +-------- $—-——-----— $+—-—------- + 
User | CHMU | CHMS | CHME | CHMK (I[TInter(@)|Excep(1)1 impos- | 
IS=6 | REI | | lExcep(@) | lInter(1)| sible | 
IPL=9 | | | | | | | | 
+-------- +-------- +—-------- +-------- $+—-------- +-------- $——------- + 
Super | | CHMU,S | CHME | CHMK |Inter(@)|Excep(1)| impos- | 
IS=0 | REI* | REI | |Excep(@) | lInter(1)| sible | 
IPL=6 | | | | | | | | 
+-------- +-------- +-------- +-------- +—-------- +—-------- $—-—-------— + 
Exec | | |CHMU,S,E| CHMK I|Inter(®)|Excep(1)| impos- | 
IS=0 | REI* | REI* |— REI |Excep(@) | lInter(1)| sible | 
IPL=6 | | | | | | | | 
+--------— +—-------- $+-------- 4+—-------- +-------- +—-------- $—-—-------— + 
Kernel | | | |CHMUSEK |MTPR IPL] SVPCTX |HALT | 
IS=0 | REI* | REI* | REI* | REI* = |[Inter(@)|Excep(1)|] Instr.| 
IPL=6 | | | [Excep (®) | lInter(1l) | | 
| | | IMTPR IPL| | | | 
| | | | LDPCTX | | | | 
+-------- +-------- +-------- +-------- $+-------- +—-—------- +—-------- + 
Kernel | | | | |CHMUSEK | | | 
IS=0 | REI* | REI* | REI*® |MTPR IPL] REI* | SVPCTX |HALT | 
IPL>O | | | | REI* |Excep(@)|Excep(1)|] Instr.| 
| | | | lInter(@)|Inter(1l) | | 
| | | | IMTPR IPL| | | 
| | | | | LDPCTX | | | 
+-------- +-------- +-------- +—-------- +-------- +-------- +—--------— + 
Kernel | | | | | | SVPCTX |HALT | 
IS=l | REI* | REI* | REI* | REI* | LDPCTX | REI | Instr.| 
IPL>O | | | | | REI* | Excep |CHMUSEK | 
| | | | | | Inter | | 
| | | | | IMTPR IPL| | 
+-------- $—-------- +-------- +-------- +—-------- $—-—------- $+-—------- + 
Inter is Interrupt (0) is vector<1:08> = @ 
Excep is Exception (1) is vector<1:0> = 1 


* Any REI that increases mode can cauSe an 
interrupt request at IPL 2 for AST delivery. 
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7.1 PROCESS DEFINITION 


A process is a single thread of execution. It is the basic schedulable 
entity that is executed by the processor. A process consists of an 
address space and both hardware and software context. The hardware 
context of a process is defined by a Process Control Block (PCB) that 
contains images of the 14 general purpose registers, the processor 
status longword (PSL), the program counter (PC), the 4 per-process stack 
pointers, the process virtual memory defined by the base and _ length 
registers P@BR, P@LR, PIBR, and PILR and several minor control fields. 
In order for a process to execute, the majority of the PCB must be moved 
into the internal registers. While a process is executing, some of its 
hardware context is being updated in the internal registers. When a 
process is not being executed its hardware context is stored in a data 
Structure termed the Process Control Block (PCB). Saving the contents 
of the privileged registers in the PCB of the currently executing 
process and then loading a new context from another PCB is’ termed 
context switching. Context switching occurS as one process after 
another is scheduled for execution. 


Process Structure 21-May-88 -- Rev 5 Page 7-2 
PROCESS CONTEXT 


7.2 PROCESS CONTEXT 
7.2.1 Process Control Block Base (PCBB) 


The process control block for the currently executing process is pointed 
to by the content of the Process Control Block Base (PCBB) register, an 
internal privileged register. Figure 7.1 depicts the Process Control 
Block BaSe. 


|MBZ | physical longword address of PCB |MBZ | 
$———-4+—------------- -- - - - - - - -- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - +—--—-+ 


(read/write) 
Process Control Block Base (PCBB) Register 


At bootstrap time, the contents of PCBB is UNPREDICTABLE. 


7.2.2 Process Control Block (PCB) 


The process control block (PCB) contains all of the switchable process 
context ,collected into a compact form for ease of movement to and from 
the privileged internal registers. Although in any normal operating 
system there is additional software context for each process, the 
following description is limited to that portion of the PCB known to the 


hardware. Figure 7-2 depicts the PCB, whose contents are described in 
Table 7-l. 
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31 
$---------------------------- --- -- - -- - -- - - - = - + + 


: PCB 
+4 
+8 
+12 
+16 
+20 
+24 
+28 
+32 
+36 
+4Q 
+44 
+48 
+52 
+56 


$o----+-~--~------ ~~~ ~~ +--+ + + + + 5 + 5 + + +--+ 


peewee + 


$oon-- + + + ee ne ee 5 5 + + + + + + 


$o--------------- +--+ + +--+ + + ee + + 


$a------- - +--+ 


$—------------- +--+ - +--+ +--+ 


fanaa $e 5 5 5  e  -- - = = + 


$------------------- --- - - -- - - - - -- -- - = + 


$---------------------------- -- -- - - - - - - - - - - +--+ +--+ 


$—------------- -- 5 - - - + +--+ ++ +--+ 


$--------------------------------- -- -- - -- -- --- - = - - +--+ + 


$o-------- ee + 5 + 


+--------------------------- --- --- -- -- -- - - - -- - = - +--+ + 


KSP 

ESP 
+------------------------ ----- - - -- - - - - - - - - - - - - - - - - - - -  $ 

SSP | 
$--------------- -- - - - - - - - - - -- - - - - - - - - - - - - - - - - - 

USP 

RQ 

Rl 

R2 

R3 

R4 

R5 

R6 

R7 

R8 

RO 

R10 


+69 
+64 
+68 
+72 
+76 
+89 
+84 
+88 
+92 


$n -- 4 -- - - - f - - - ¢ - -  - - - - - - - - - - - - - - - - - - - - -  - - - -  -  -  - - - -  ¢ 


| 


$af-------------- --- 4. -- - -- - - -- -- - -- - - - - - - - - - - - - = - 5 ++ + 


po------- +--+ + + 5 


femme e+ 
PC 
$--------- ~~ - - +--+ + ee 5 5 


$--------------- -- +--+ - + -- - - - - + - - - -- - - - 5 5 5 


+---------4}-----4---+----------------- -- ---- - --- -- = - -- = - -- = - - == + 


$--------~-+ +--+ +--+ +--+ + +--+ - 5 - 5 - - - - -- - - - - - - + 


P@LR 
P1ILR 


PIBR 


Rll 
AP (R12) 
FP (R13) 

PSL 

POBR 


|MBZ | 


AST 
LVL 
MBZ 


MBZ 
$-$-----------------4--- -- -- - -- -- -- -- -- -- -- - - - = = 5 5 + +--+ 


[P| 
[M| 
[E | 


Process Control Block (PCB) 


Figure 7-2 
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4) 


18 


19 


20 


21 


21 


re 
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Table 7-1 


Description of Process Control Block 


Bits 


<31:9> 


<31:0> 


<31:0> 


<31:@> 


<31:0> 


<31:0> 


<31:0> 


<31:0> 


<21:0> 


<23: 22> 


Mnemonic 


KSP 


ESP 


SSP 


USP 


AP,FP 


PC 
PSL 


PZBR 


POLR 


MBZ 


Description 


Kernel Stack Pointer. Contains’ the 
Stack pointer to be used when the 
current access mode field in the PSL 
is ®@ and IS = @. 


Executive Stack Pointer. Contains 
the stack pointer to be used when the 
Current access mode field in the PSL 
is l. 


Supervisor Stack Pointer. Contains 
the stack pointer to be used when the 
current access mode field in the PSL 
1S 2, 


User Stack Pointer. Contains’7 the 
Stack pointer to be used when the 
current access mode field in the PSL 
is 3. 


General registers R@ through Rll, 
AP, FP. 


Program Counter. 

Program Status Longword. 

Base register for page table 
describing process virtual addresses 
From @ to 2**3@-1. See chapter 5. 
Length register for page table 
located by P#BR. Describes effective 
length of page table. See chapter 5. 


Must be zero. 
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21 


21 


22 


23 


23 


23 


<26: 24> 


<31:27> 


<31:0> 


<21:0> 


<30: 22> 


<31> 
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ASTLVL 


MBZ 


P1IBR 


P1ILR 


MBZ 


PME 


Contains access mode number 
(established by software) of the most 
privileged access mode for which an 
AST is pending. Controls the 
triggering of the AST delivery 
interrupt during REI instructions. 


ASTLVL Meaning 


4) AST pending for access 
mode @ (kernel) 


al AST pending for access 
mode 1 (executive) 


2 AST pending for access 
mode 2 (Supervisor) 


3 AST pending for access 
mode 3 (user) 


4 No pending AST 
5-7 Reserved to DIGITAL 
Must be zero. 


Base register for page table 
describing process virtual addresses 
from 2**38 to 2**31-1. See chapter 
De 


Length register for page table 
located by PIBR. Describes effective 
length of page table. See chapter 5. 


Must be zero. 


Performance Monitor Enable controls a 
Signal visible to an external 
hardware performance monitor. This 
bit is set to identify those 
processes for which monitoring is 
desired and to permit their behavior 
to be observed without interference 
From other system activity. 
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Software symbols for these locations consist of the prefix PTXSL and 
the mnemonic. For example, the PCB offset to R3 is PTXSL R3. 
Exceptions are longwords 21 and 23, for which the software symbols are: 


PTX$L_P@LRASTL longword 21 
PTXSL_ PILRPME longword 23 


To alter its P@BR, P1BR, P@LR, PILR, ASTLVL or PME, a process must be 
executing in kernel mode. It must first store the desired new value in 
the memory image of the PCB then move the value to the appropriate 
privileged register. This protocol results from the fact that these are 
read-only fields (for the context switch instructions) in the PCB. 


7.2.3 Process Privileged Registers 


The ASTLVL and PME fields of the PCB are contained in registers when the 
process is running. In order to access them, two privileged registers 
are provided. Figure 7.3 depicts the AST Level Register. 


| ignored; returns @ |AST- | 


(read/write) 
Figure 7-3 AST Level Register 


An MTPR src,#ASTLVL with src<2:8> GEQU 5 results in a reserved operand 
fault. At bootstrap time, the contents of ASTLVL is 4. Figure 7.4 
depicts the Performance Monitor Enable (PME) Register. 


3 

1 1 @ 
+------------ -- - - - - - - - - - ee + +—+ 
| IP | 
| MBZ IM] 
| lE | 
$--------------------- -- - - - - - - - - - - - - - - - = +—+ 


(read/write) 
Figure 7-4 Performance Monitor Enable Register 


At bootstrap time, PME is cleared. 
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7.3 ASYNCHRONOUS SYSTEM TRAPS (AST) 


Asynchronous system traps are a technique for notifying a process of 
events that are not synchronized with its execution and initiating 
processing for asynchronous events with the least possible delay. This 
delay in delivery of the AST may be due to either process non-residence 
or an access mode mismatch. The efficient handling of AST's in VAX-11 
requires some hardware assistance to detect changes in access mode 
(current access mode in PSL). A process in any of the four execution 
access modes (kernel, exec, Super, and user) may receive AST's; 
however, an AST for a less privileged access mode must not be permitted 
to interrupt execution in a more protected access mode. Since outward 
access mode transitions occur only in the REI instruction, comparison of 
the current access mode field is made with a privileged register 
(ASTLVL) containing the most privileged access mode number for which an 
AST is pending. If the new access mode iS greater than or equal to the 
pending ASTLVL, an IPL 2 interrupt is triggered to cause delivery of the 
pending AST. 


General Software Flow for AST processing: 


1. An event associated with an AST causes software enqueuing of an 
AST control block to the software PCB and the software sets the 
ASTLVL field in the hardware PCB to the most privileged access 
mode for which an AST is pending. If the target process is 
currently executing, the ASTLVL privileged register also has to 
be set. 


2. When an REI instruction detects a transition to an access' mode 
that can be interrupted by a pending AST, an IPL 2 interrupt is 
triggered to cause delivery of the AST. Note that the REI 
instruction does not make pending AST checks while returning to 
a routine executing on the interrupt stack. 


3. The (IPL 2) interrupt service routine should compute the 
correct new value for ASTLVL that prevents additional AST 
delivery interrupts while in kernel mode and move that value to 
the PCB and the ASTLVL register before lowering IPL and 
actually dispatching the AST. This interrupt service routine 
normally executes on the kernel stack in the context of the 
process receiving the AST. 


4. At the conclusion of processing for an AST, the ASTLVL is 
recomputed and moved to the PCB and ASTLVL register by 
software. 
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7.4 PROCESS STRUCTURE INTERRUPTS 


Two of the software interrupt prioritieS are reserved for process 
structure software. 


They are: 
(IPL 2) - AST delivery interrupt. 


This interrupt is triggered by a REI that detects 
PSL<CUR_MOD> GEQU ASTLVL and indicates that a pending AST 
may now be delivered for the currently executing process. 


(IPL 3) - Process scheduling interrupt. 


This interrupt is only triggered by software to allow the 
software running at IPL 3 to cause the currently 
executing process to be blocked and the highest priority 
executable process to be scheduled. 


7.5 PROCESS STRUCTURE INSTRUCTIONS 


Process scheduling software must execute on the interrupt stack (PSL<IS> 
set) in order to have a non-context-switched stack available for use. 
If the scheduler were running on a_ process's kernel stack, then any 
State information it had there would disappear when a new process is 
selected. Running on the interrupt stack can occur as the result of the 
interrupt origin of scheduling events, however some synchronous 
scheduling requests such as a WAIT service may want to cause 
rescheduling without any interrupt occurrence. For this reason, the 
Save Process Context (SVPCTX) instruction can be executed while on 
either the kernel or the interrupt stack and forces a transition to 
execution on the interrupt stack. 


All of the process structure instructions are privileged and _ require 
kernel mode. 
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LDPCTX Load Process Context 
Purpose: restore register and memory management context 
Format: 

opcode 
Operation: 


if PSL<CUR_MOD> NEQU @ 
then {privileged instruction fault}; 

{invalidate per-process translation buffer entries}; 

!PCB is located by physical address in PCBB 

if {internal registers for stack pointers} then 
begin 
KSP <- (PCB); 
ESP <- (PCBt+4); 
SSP <- (PCBt8); 
USP <- (PCB+12) 
end; 

R@ <- (PCB+146); 

Rl <- (PCB+2@); 

R2 <- (PCB+24); 

R3 <- (PCB+28); 

R4 <- (PCB+32); 

R5 <- (PCBt+35); 

R6 <- (PCBt+49); 


) 

) 

RO <- (PCB+52) 

R1®@ <- (PCB+56 

Rll <- (PCB+60 

AP <- (PCB+64); 

FP <- (PCB+68); 

tmpl <- (PCBt8@); 

if {tmpl<31:30> NEQU 2} OR {tmpl<1l:9> NEQU @} then 
{reserved operand abort}; 

P@BR <- tmpl; 

if (PCB+84)<31:27> NEQU @ then {reserved operand abort}; 

if (PCB+84)<23:22> NEQU @ then {reserved operand abort}; 

POLR <- (PCB+84) <21: 90>; 

if (PCB+84)<26:24> GEQU 5 then {reserved operand abort}; 

ASTLVL <- (PCB+84) <26: 24>; 

tmpl <- (PCB+88); 

tmp2 <- tmpl + 2%**23; 

if {tmp2<31:38> NEQU 2} OR {tmp2<1:0> NEQU 6} then 
{reserved operand abort}; 

PIBR <- tmpl; 

if (PCB+92)<38:22> NEQU @ then {reserved operand abort}; 

PILR <-— (PCB+92) <21:@>; 

PME <- (PCB+92)<31>; 

if (PCB+92)<38:22> NEQU @ then {reserved operand abort}; 

if PSL<IS> EQLU 1 then 
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begin 

ISP <- SP; 
{interrupts off}; 
PSL<KIS> <- @; 


SP <- (PCB); 'get KSP 
{interrupts on}; 
end; 
-(SP) <- (PCB+76); !'push PSL 
-(SP) <- (PCBt+72); !push PC 


Condition Codes: 


N <- N; 
Z<- Z3 
V <- V;3 
Cc. <= Cc; 


Exceptions: 


reserved operand 
privileged instruction 


Opcodes: 


06 LDPCTX Load Process Context 


Description: 


The Process Control Block is specified by the privileged register 
Process Control Block Base. The general registers are loaded from the 
PCB. The memory management registers describing the process’ address 
Space are also loaded and the process entries in the translation buffer 
are cleared. Execution is switched to the kernel stack. The PC and PSL 
are moved from the PCB to the stack, Suitable for use by a subsequent 
REI instruction. 


Note: 


1. Some processors keep a copy of each of the per-process’~ stack 
pointers in internal registers. In those processors, LDPCTX 
loads the internal registers from the PCB. Processors that do 
not keep a copy of all four per-process stack pointers in 
internal registers, keep only the current access mode register 
in an internal register and switch this with the PCB contents 
whenever the current access mode field changes. 


2. Some implementations may not perform some or all of the 
reserved operand checks. 
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Save Process Context 


Save register context 


SVPCTX 
Purpose: 
Format: 

opcode 
Operation: 


if PSL<CUR_MOD> NEQU @ then 


{privileged instruction fault}; 
'PCB is located by physical address in PCBB 
if {internal registers for stack pointers} then 


begin 
(PCB) <-— KSP; 
(PCB+4) <- ESP; 
(PCB+8) <- SSP; 
(PCB+12) <- USP; 
end; 

(PCB+16) <- R@; 

(PCB+20) <- Rl; 

(PCB+24) <- R2; 

(PCB+28) <- R3; 

(PCB+32) <- R4; 

(PCB+36) <- R5; 

(PCB+49) <- R6; 

(PCB+44) <- R7; 

(PCB+48) <-— R8; 

(PCB+52) <- RQ; 

(PCB+56) <- R1@; 

(PCB+6@) <- Rll; 

(PCB+64) <-— AP; 

(PCB+68) <-— FP; 

(PCB+72) <- (SP)+; 

(PCB+76) <- (SP)+; 

If PSL<IS> EQLU @ then 
begin 
PSL<IPL> <- MAXU (1, 
(PCB) <- SP; 
KSP <- SP; 
{interrupts off}; 
PSL<IS> <—- 13 


SP <- ISP; 
{interrupts on}; 
end; 


Condition Codes: 


N <- N; 
Z SZ 
V <- V3 
C. <=; 'C> 


!pop PC 
!pop PSL 


PSL<IPL>) ; 


'save KSP 
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Exceptions: 
privileged instruction 
Opcodes: 


O7 SVPCTX Save Process Context 


Description: 


The Process Control Block is specified by the privileged register 
Process Control Block Base. The general registers are saved into the 
PCB. The PC and PSL currently on the top of the current stack are 
popped and stored in the PCB. If a SVPCTX instruction is executed when 
IS is clear, then IS is set, the interrupt stack pointer activated, and 
IPL is maximized with 1 because of the switch to the interrupt stack. 


Notes: 


1. The map, ASTLVL, and PME contents of the PCB are not’ saved 
because they are rarely changed. Thus, not writing them saves 
overhead. 


2. Some processors keep a copy of each of the per-process’ stack 
pointers in internal registers. In those processors, SVPCTX 
Stores the internal registers into the PCB. processors that do 
not keep a copy of all four per-process stack pointers in 
internal registers, keep only the current access mode register 
in an internal register and switch this with the PCB contents 
whenever the current access mode field changes. 


3. Between the SVPCTX instruction that saves state for one process 
and the LDPCTX that loads the state of another, the internal 
Stack pointers may not be referenced by MFPR Or MTPR 
instructions. This implies that interrupt service routines 
invoked at a priority higher than the lowest one used _ for 
context switching must not reference the process”~ stack 
pointers. 
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7.6 USAGE EXAMPLE 


The following example illustrates how the process structure instructions 
can be used to implement process dispatching software. It is assumed 
that this simple dispatch routine is always entered via an interrupt. 


ENTERED VIA INTERRUPT 
IPL=3 


=e ZO RO 


RESCHED: SVPCTX : Save context in PCB 


<set state to runnable> 
<and place current PCB> 
<on proper RUN queue> 


<Remove head of highest> 
<priority, non-empty, > 
<RUN queue.> 


MTPR @#PHYSPCB, PCBB ; Set physical PCB address 
sin PCBB 

LDPCTX ; Load context from PCB 
; For new process 

REI ; Place process in execution 


BLANK 


CHAPTER 8 
SYSTEM ARCHITECTURAL IMPLICATIONS 


17-June-88 -- Rev 5 


8.1 INTRODUCTION 


Certain portions of the VAX-11 architecture have implications on_ the 
system structure of implementations. There are four broad categories of 
interaction: data sharing and synchronization, restartability, 
interrupts and errors. Of these, data sharing is most visible to the 
programmer. 


8.2 DATA SHARING AND SYNCHRONIZATION 


The memory system must be implemented such that the granularity of 
access for independent modification is the byte. Note that this does 
not imply a maximum reference size of one byte but only that independent 
modifying accesses to adjacent bytes produce the Same results regardless 
of the order of execution. For example, Suppose locations @ and 1 
contain the values 5 and 6. Suppose one processor executes INCB 98 and 
another executes INCB 1. Then regardless of the order of execution, 
including effectively simultaneous, the final contents must be 6 and 7. 


Access to explicitly shared data that may be written must be 
Synchronized by the programmer or hardware designer. Before accessing 
shared writeable data, the programmer must acquire control of the data 
structure. Seven instructions (BBSSI, BBCCI, ADAWI, INSQHI, INSOQTI, 
REMQHI, REMQTI) are provided to allow the programmer to control 
("interlock") access to a control variable. These interlocked 
instructions must be implemented in such a way that read, test, modify, 
and write happen while other processors and I/O devices are locked out 
of performing interlocked operations on the Same control variable. This 
is termed an interlocked sequence. Only interlocking operations are 
locked out by the interlock. On the VAX-11/788, the SBI primitive 
operations are interlock read and interlock write. The interlocked read 
operation sets the interlock, and the interlocked write releases it. 
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BBSSI and BBCCI instructions use hardware provided primitive operations 
to make a read reference, then test, and then make a write reference to 
a Single bit within a single byte in an interlocked Sequence. The ADAWI 
instruction uses a hardware provided primitive operation to make a read 
and then a write operation to a Single aligned word in an _ interlocked 
sequence to allow counters to be maintained without other interlocks. 
The ADAWI instruction takes the hardware lock on the read of the .mw 
operand (the second operand which is the one being modified). 


The INSQUE and REMQUE instructions provide a series of longword reads 
and writes in an uninterruptible sequence to allow queues’ to be 
maintained without other interlocks in a uniprocessor system. 


The INSQHI, INSQTI, REMQOHI, and REMOTI inStructions use an interlock on 
the queue header to allow queues to be maintained consistently in a 
multiprocessor system. 


In order to provide a functionality upon which some UNIBUS' peripheral 
devices rely, processors must insure that all instructions making byte 
or word sized modifying references (.mb-= and -mw) use the DATIP - 
DATO(B) functions when the operand physical address selects a UNIRBUS 
device. This constraint does not apply to longword, gquadword, field, 
all floating, or string operations if implemented using byte or word 
modifying references. This constraint also does not apply to 
instructions precluded from I/O space references (see Appendix A). 


In a multiprocessor system, any software clearing PTE<V> or changing the 
protection code of a page table entry for system space such that it 
issues a MTPR xxx,#TBIS must arrange for all other processors to issue a 
Similar fTBIS. The original processor must wait until all the other 
processors have completed their TBIS before it allows access to the 
system page. 


8.3 CACHE 


A hardware implementation may include a mechanism to reduce access time 
by making local copies of recently used memory contents. Such a 
mechanism is termed a cache. A cache must be implemented in such a_ way 
that its existence is transparent to software (except for timing and 


error reporting/control/recovery). In particular, the following must be 
true: 


1. Program writes to memory followed by starting a_ peripheral 
output transfer must output the updated value. 


2. Completing a peripheral input transfer followed by the program 
reading of memory must read the input value. 


3. A write or modify followed by a HALT on one processor’ followed 
by a read or modify on another processor must read the updated 
value. 
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4. A write or modify followed by a power failure followed by 
restoration of power followed by a read or modify must read the 
updated value provided that the duration of the power failure 
does not exceed the maximum non-volatile period of the main 
memory. 


5. In multiprocessor systems, access to variables shared between 
processors must be interlocked by software executing one of the 
interlocked instructions (BBSSI, BBCCI, ADAWI, 
INSOHI , INSOTI ,REMQHI,REMOQTI). 


6. Valid accesses to I/O registers must not be cached. 


On the VAX-11/78@, this is achieved by a cache that writes through to 
memory and that watches the memory bus’ for all external writes to 
memory. 


At bootstrap time, the cache must be either empty or valid. 


8.4 RESTARTABILITY 


The VAX-11 architecture requires that all instructions be restartable 
after a fault or interrupt that terminated execution before the 
instruction was completed. Generally, this means that modified 
registers are restored to the value they had at the start of execution. 
For some complex or iterative instructions, indicated in Chapter 4, 
intermediate results are stored in the general registers. In the latter 
case memory contents may have been altered but the former case requires 
that no operand be written unless the instruction can be completed. For 
most instructions with only a single modified or written operand, this 
implies special processing only when a multibyte operand spans a 
protection boundary making it necessary to test accessibility of both 
parts of the operand. 


In order that instructions which store intermediate results in the 
general registers not compromise system integrity, they must insure that 
any addresses stored or used are virtual addresses, subject to 
protection checking, and that any state information stored or used 
cannot result in a non-interruptable or non-terminating Sequence. 


Instruction operands that are peripheral device registers having access 
side effects may produce UNPREDICTABLE results due to instruction 
restarting after faults or interrupts. In order that software may 
dependably access peripheral device registers, instructions used to 
access them must not permit a fault or interrupt after the first I/0 
Space access. The instructions and addressing modes that can be used to 
meet this condition are listed in Appendix A, "INSTRUCTIONS USABLE TO 
REFERENCE I/0 SPACE." 


Memory modifications produced as a side effect of instruction execution, 
e.g. memory access statistics, are specifically excluded from the 
constraint that memory not be altered until the instruction can _ be 
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completed. 


Instructions that abort are constrained only to insuraq memory protection 
(e.g., registers can be changed). 


8.5 INTERRUPTS 


Underlying the VAX-11 architectural concept of an interrupt is’ the 
notion that an interrupt request iS a static condition, not a transient 
event, which can be sampled by a processor at appropriate times. 
Further, if the need for an interrupt disappears before a processor has 
honored an interrupt request, the interrupt request can be- removed 
(subject to implementation dependent timing constraints) without 
consequence. 


In order that software be able to operate deterministically it is 
necessary that any instruction changing the processor priority (IPL) 
such that a pending interrupt is enabled must allow the interrupt to 
occur before executing the next instruction that would have been 
executed had the interrupt not been pending. 


Similarly, instructions that generate requests at the software interrupt 
levels (See Chapter 6) must allow the interrupt to occur, if processor 
priority permits, before executing the apparently subsequent 
instruction. 


8.6 ERRORS 


Processor errors, if not inconsistent with instruction completion, 
should create high priority interrupt requests. Otherwise, they must 
terminate instruction execution with an exception (fault, trap or 
abort), in which case there may also be an associated interrupt request. 


Error notification interrupts may be delayed from the apparent 
completion of the instruction in execution at the time of the error but 
if enabled, the interrupt must be requested before processor context is 
Switched, priority permitting. 


An example of a case where both an interrupt and an exception are 
associated with the same event occurs when the VAX-11/7898 instruction 
buffer gets a read data substitution (i.e. read memory data error). In 
this case the interrupt request associated with error will not be taken 
if the priority of the running program is high, but an abort will occur 
when an attempt is made to execute the instruction. However, the 
interrupt is still pending and will be taken when the _ priority is 
lowered. 
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8.7 I/O STRUCTURE 
8.7.1 Introduction 


The VAX-11 I/O architecture is very similar to the PDP-1l structure, the 
principal difference being the method by which processor registers (such 
as the PSL) are accessed (see Chapter 9) Peripheral device 
control/status and data registers appear at locations in the physical 
address space, and can therefore be manipulated by normal memory 
reference instructions. On the VAX-11/788 implementation, this I/O 
Space occupies the upper half of the physical address space and is 2**29 
bytes in length. Use of general instructions permits all the virtual 
address mapping and protection mechanisms described in Chapter 5 to be 
used when referencing I/0 registers. Note: Implementations that 
include a cache feature must suppress caching for references in the I/0 
space. 


For any member of the VAX-11 Series implementing the UNIBUS, there will 
be one or more areas of the I/O physical address space each 2**18 bytes 
in length, which "maps through" to the UNIBUS addresses. The collection 
of these areas is referred to as the UNIBUS Space. 


8.7.2 Constraints On I/O Registers 


The following is a list of both hardware and programming constraints- on 
I/O registers. These items affect both hardware register design and 
programming considerations. 


1. The physical address of an I/O register must be an _ integral 
multiple of the register size in bytes, (which must be a power 
of two); i.e., all registers must be aligned on natural 
boundaries. 


2. References using a length attribute other than the length of 
the register and/or unaligned references may produce 
UNPREDICTABLE results. For example a byte reference to a 
word-length register will not necessarily respond by supplying 
or modifying the byte addressed. 


3. In all peripheral devices, error and status bits that may be 
asynchronously set by the device must be cleared by software 
writing a "1" to that bit position and not affected by writing 
a "Os This is to prevent clearing bits that may be 
asynchronously set between reading and writing a register. 


4. Only byte and word references of a read-modify-write (il.e., 
"smb" or "“.mw") type in UNIBUS I/O spaces are guaranteed to 
interlock correctly. References in the I/O space other than in 
UNIBUS spaces are UNDEFINED with respect to interlocking. This 
includes the BBSSI and BBCCI instructions. 
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5. String, quad, octa, F floating, D floating, G floating, 
H floating, and field references in the T/O space result in 
UNDEFINED behavior. 


CHAPTER 9 
PRIVILEGED REGISTERS 


13-May-81 -- Rev 5.2 


9.1 PROCESSOR REGISTER SPACE 


The processor register space (PRS) provides access to many types of CPU 
control and status registers such as the memory management’ base 
registers, the PSL, and the multiple stack pointers. These registers 
are explicitly accessible only by the Move to Processor Register (MTPR) 
and Move from Processor Register (MFPR) instructions which’ require 
kernel mode privileges. 


All the internal processor registers are summarized in the tables at the 
end of this section. Those which need further explanation are described 
below. Reference to general registers means RY through R13, the SP, and 
the PC (See Chapter 2). Registers referenced by the MTPR and MFPR 
instructions are designated processor registers, and appear in the 
processor register space. 


9.2 PER-PROCESS REGISTERS AND CONTEXT SWITCHING 


There are several per-process registers which are loaded from the PCB 
during a context load operation and, with the exception of the memory 
mapping registers and AST level, written back to the PCB during a 
context save operation (see Chapter 7). Some implementations may copy 
some or all of these registers from the PCB into Scratchpad registers 
and write them back into the PCB during a context save operation. Other 
implementations may retain the registers in main memory in the PCB. 


For this reason, reading or writing any of these registers via the MFPR 
or MTPR instruction, or through reference to SP, may or may not read or 
write the register copy in the current PCB, depending on the 
implementation. Likewise modifying one of these registers in the PCB 
will not necessarily update the register which appears in the register 
Space or SP. 
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An implementation may retain some or all per-process internal registers 
only in the PCB. In this case, MTPR and MFPR for these registers must 
access the corresponding PCB location. However, implementations’7 that 
have internal registers in hardware scratchpads are not required to 
access the corresponding PCB locations for MTPR and MFPR. 


9.3 STACK POINTER IMAGES 


Reference to SP (the stack pointer) in the general registers will access 
one of five possible stack pointers; the user, SuperviSor, executive, 
kernel, or interrupt stack pointer, depending on the values of the 
current mode and IS bits in the PSL (See Chapter 6). Additionally, 
software can access any of the five stack pointers (including the one 
currently selected by the current mode and IS bits in the PSL) via the 
MTPR and MFPR instructions (even on processors that implement the _ KSP, 
SSP, ESP, or USP only in the PCB) Results are correct even if the stack 
pointer specified by the current mode and IS bits in the PSL is 
referenced in the PRS by an MTPR or MFPR instruction. This means that a 
MFPR/MTPR to the KSP (if IS=@) or the ISP (if IS=1) is equivalent to a 
MOVL from/to the SP. 
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9.4 MTPR AND MFPR INSTRUCTIONS 
MTPR Move To Processor Register 
Format: 
opcode src.rl, procreg.rl 
Operation: 
if PSL <CUR_MOD> NEQ @ then {reserved 
instruction fault}; 
PRS [(procreg] <- src; 
Condition Codes: 
N <- sre LSS @Q; !if register is replaced 
Z <- sre EQL @; 
V <- @; !except TBCHK register (see Chapter 5) 
C <= Ce 
N <- N; !if register is not replaced 
Z<- Z3 
V <- V;3 
C <- C; 


Exceptions: 


Opcode: 


DA 


reserved operand fault 
reserved instruction fault 


MTPR Move To Processor Register 


Description: 


Loads the source operand specified by Source into the processor register 


Specified by procreg. 


the processor register number. Execution may have 
Side effects. 


Notes: 


l. 


26 


If the processor internal register does not 
operand fault occurs. 


The procreg operand is a longword which contains 


register-specific 


exist 


a 


reserved 


A reserved instruction fault occurs if instruction execution is 


attempted in other than kernel mode. 
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3. A reserved operand fault occurs on a move to ae read only 
register. 
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MFPR Move From Processor Register 
Format: 

opcode procreg.rl, dst.wl 
Operation: 

if PSL <CUR_MOD> NEQ 6 then {reserved 

instruction fault}; 


dst <- PRS[procreg]; 


Condition Codes: 


N <- dst LSS @; !if destination is replaced 

Z <- dst EQL @; 

V <- @3 

C= Cs 

N <- N; !if destination is not replaced 
Z<- Z3 

V<- V3 

C <= Cs 


Exceptions: 


reserved operand fault 
reserved instruction fault 


Opcode: 


DB MF PR Move From Processor Register 


Description: 


The destination operand is replaced by the contents of the processor 
register specified by procreg. The procreg operand is a longword which 
contains’ the processor register number. Execution may have 
register-specific side effects. 


Notes: 


1. If the processor internal register does not exist ae reserved 
operand fault occurs. 


2. A reserved instruction fault occurs if instruction execution is 
attempted in other than kernel mode. 


3. A reserved operand fault occursS on a move from a write only 
register. 
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9.5 VAX-11 SERIES REGISTERS 


Register Name 


Kernel Stack Pointer 
Executive Stack Pointer 
Supervisor Stack Pointer 
User Stack Pointer 
Interrupt Stack Pointer 

P@ Base Register 

P§@ Length Register 

Pl Base Register 

Pl Length Register 

System Base Register 
System Limit Register 
Process Control Block Base 
System Control Block Base 
Interrupt Priority Level 
AST Level 

Software Interrupt Request 
Software Interrupt Summary 
Interval Clock Control 
Next Interval Count 
Interval Count 

Time of Year (optional) 
Console Receiver C/S 
Console Receiver D/B 
Console Transmit C/S 
Console Transmit D/B 
Memory Management Enable 
Trans. Buf. Invalidate All 


Trans. Buf. Invalidate Single 


Performance Monitor Enable 
System Identification 
Translation Buffer Check 


Mne- 


monic 


KSP 
ESP 
SSP 
USP 
ISP 
P@BR 
POLR 
P1IBR 
P1LR 
SBR 
SLR 
PCBB 
SCBB 
IPL 


ASTLVL 


SIRR 
SISR 
ICCS 
NICR 
ICR 

TODR 
RXCS 
RXDB 
TXCS 
TXDB 


MAPEN 


TBIA 
TBIS 
PMR 
SID 


TBCHK 
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Type 


R/W 
R/W 


R/W 


Scope 


PROC 
PROC 
PROC 
PROC 
CPU 
PROC 
PROC 
PROC 
PROC 
CPU 
CPU 
PROC 
CPU 
CPU 
PROC 
CPU 
CPU 
CPU 
CPU 
CPU 
CPU 
CPU 
CPU 
CPU 
CPU 
CPU 
CPU 
CPU 
PROC 
CPU 
CPU 
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9.5.1 System Identification Register (SID) 


The SID is a read only constant register that specifies the processor 
type. The entire SID register is included in the error log and the type 
field may be used by software to distinguish processor types. 


3 2 2 

i 4 3 4 
4+—--------------- +--------------------- --- -- - -- - - - - - - - - - - -- -- - + 

| TYPE | type specific | 
+--------------- $--------------------- --- - -- -- - -- - - -- -- --- ------ + 
(read only) 
System Identification Register 

Type A unique number assigned by engineering to identify a specific 


processor: 


through 127 = Reserved to DIGITAL 
28 through 255 = Reserved to CSS and customers 


@ = Reserved to DIGITAL (error) 
1 = VAX-11/782@ 

2 = VAX-11/75@ 

3 = VAX-11/7390 

4 

1 


type specific format and content is a function of the value in 
type. It is intended to include such information 
as serial number and revision level. 


For the VAX-11/788, the type specific format is: 


2 Db si 1. Ab 

3 5 4 2: & 4 
$------------~----- a foo --- = + + 
| ECO level lplant| serial number | 
$——---------------- +----- $—---------------------- + 


For the VAX-11/7580, the type specific format is: 
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9.5.2 Console Terminal Registers 


The console terminal is accessed through four internal registers. Two 
are associated with receiving from the terminal and two with writing to 
the terminal. In each direction there is a control/status register and 
a data buffer register. 


3 
1 8765 4 
+-------—-——-- - ~~ + +—-+-+----------- + 
| ID|I| | 
| MBZ lO|E| MBZ | 
| IN| | | 
+-------—------------- -- - - - +-+-+—-—---------- + 
R R 
OW 
Console Receive Control/Status  (RXCS) 
3 111i 11 
1 6 5 4 2-1 8 7 4) 
+---~-------—-——------------------- +-4+----- +—------- +——--—-—---------- + 
| lE | | | | 
| Q IR| @ | ID | DATA | 
| IR| | | | 
+—-------—----~--------- ~~ --- + +-+----- +—-—------ $——-—-—-—-—---------- + 


(read only) 
Console Receive Data Buffer (RXDB) 


At bootstrap time, RXCS is initialized to 4@. Whenever a datum is 
received, the read only bit DONe is set by the console. If IE 
(interrupt enable) is set by the software then an interrupt is generated 
at IPL 29. Similarly, if DONe is already set and the software sets IE, 
an interrupt is generated (i.e., an interrupt is generated whenever’ the 
function {IE AND DON} changes from @ to 1). If the received data 
contained an error such as overrun or loss of connection then ERR is set 
in RXDB. The received data appears in DATA. When a MFPR #RXDB,dst is 
executed, DONe is cleared as is any interrupt request. If ID is ® then 
the data is from the console terminal. If ID is non-zero then the 
entire register is implementation dependent. 
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3 

1 8765 g 
fee aS aa eee SSeS eee a eae eae ae eee eee eee +—+-+--~-------- + 
| IRII| | 
| MBZ IDE] MBZ | 
| ly! | | 
+----------------------------------- ------------ +—+-4+----------- + 

RR 
OW 
Console Transmit Control/Status (TXCS) 

3 5 ae) 

1 21 8 7 0 
4---------~------------------------------ +—------ $—--------------- + 
| MBZ | ID | DATA | 
$------------------- --- - ---- ------------ $——------— +--------------- + 


(write only) 
Console Transmit Data Buffer (TXDB) 


At bootstrap time, TXCS is initialized with just the RDY bit set 
(ready). Whenever the console transmitter is not busy, it sets the read 
only bit RDY. If IE (interrupt enable) is set by the software then an 
interrupt is generated at IPL 20. Similarly, if RDY is already set and 
the software sets IE, an interrupt is generated (i.e., an interrupt is 
generated whenever the function {IE AND RDY} changes from @ to 1). The 
software can send a datum by writing it to DATA. When a MTPR~ src,#TXDB 
is executed, RDY is cleared as is any interrupt request. If ID is 
written 9 then the datum is sent to the console terminal. If ID is 
non-zero then the entire register is implementation dependent. 


On the VAX-11/788@ if ID is one then the datum is sent to the floppy 
disk. 


9.5.2.1 VAX-11/788 console register implementation - 


RXDB 
3 2 2 yee | 1 il 
l 4 3 6 5 2: 8 7 4 
+—---------- +----------- $—----------- $----- $——-—---------- + 
| | | | | | 
| MBZ | MBZ | Used by | | | 
| | | DL-11 | | | 
+---------- +----------- $----------- $——---- $——-—---------- + 
| | 
| | 
Select Data 
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TXDB 


Z 
wo 
N 
5 eee | 
z 
ee 
N 
+ ———+ 
=z 
wo 
N 
+ ———+ 


Select Field Values (in Hex) 


Select Code Device Data Field Values 


i) Operator's Terminal ®@ thru 7F - ASCII Data 
1 Drive 9 (Data) ® thru FF - Binary Data 
2 Function Complete (Status) 

9 Drive @ (Command) Read Sector 

Write Sector 

Read Status 

Write Deleted Data 
Sector 


Cancel Function 
Protocol Error 


F Misc. Communication Software Done 
Boot CPU 
Clear Warm-start flag 


Clear Cold-start flag 


Mm WN FF 
tou te Wl 


Code 5 (Protocol Error), is sent by the console when one of the 
following occurs: 


l. Another load device command (except for Cance] Function) is 
issued by the OS before a previous command is completed. 


2. The console gets a 'Drive 8 (DATA)' when expecting a command. 
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9.5.2.1.1 Status Byte Definition - The Status Byte is used by VMS to 
determine the success or failure of a Read or Write operation. The 
Status Byte is sent to the OS at the completion of a Read, Write, or 
Read Status operation. The Select code is always ‘Function Complete' 
(code 2). The Status Bit assignments are as follows: 


RXDB 
3 2.9 11 11 
1 4 3 6 5 21 8 76 2186 
+------------ +------------ +------------ +----- +—-+—-+—---+-+-+-+ 
| | | | | | lL | dol 
| MBZ | MBZ | MBZ | | | | | | | | 
| | | | | | | 1 | dd 
$e $------------ $------------ +----- +—+-+4+---+-+-+-+4+ 
| | 
CODE '2! | | CRC ERR 


PARITY ERROR 


The Status Bit assignments are identical to those supplied by the Floppy 
controller, excepting Bit 7. Bit 7 corresponds to Bit 15 of the 
Floppy's 'RXCS' Register. 


9.5.3 Clock Registers 


The clocks consist of a time of year clock and an interval clock. The 
time of year clock is used to measure the duration of power failures and 
is required for unattended restart after a power failure. The interval 
clock is used for accounting, for time dependent events, and to maintain 
the software date and time. 


9.5.3.1 Time-of-Year Clock - 


The time-of-year clock consists of one longword register. The register 
formS an unsigned 32-bit binary counter that is driven by a precision 
clock source with at least .9025% accuracy (approximately 65 seconds per 
month). The least Significant bit of the counter represents a 
resolution of 18 milliseconds. Thus, the counter cycles to 9 after 
approximately 497 days. 
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The counter has an optional battery back-up power supply sufficient for 
at least 1498 hours of operation, and the clock does not gain or lose any 
ticks during tranSition to or from stand-by power. The battery is 
recharged automatically. If the battery has failed, so that time is not 


accurate, then the register is cleared upon power up. One of two things 
then happens: 


1. The register starts counting from @. Thus, if software 
initializes this clock to a value corresponding to a large time 
(e.g., a month), it can check for loss of time after a power 


restore by checking the clock value. This is the VAX-11/78@ 
implementation. 


2. The register stays at @ until the software writes a non-zero 


value into it. It counts only when it contains a non-zero 
value. This is the VAX-11/750 implementation. 


(read/write) 


Time of Year (TODR) 
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9.5.3.2 Interval Clock - The interval clock provides an interrupt at 
IPL 24 at programmed intervals. The counter is incremented at 1 
microsecond intervals, with at least .01% accuracy (8.64 seconds per 
day). The clock interface consists of three registers in the privileged 
register space: 


3 
1 g 
+—--------—--—-—-——-—- - - - - - - - - - - - + 
| interval count | 
+----------—-—-------- - - ee + 
(read only) 
interval count register (ICR) 
3 
1 g 
+—-—----—-—-——-——-—-—----- — —--— —- -- - - - + 
| next interval count | 
+—-------------------- - - - - - - - - - - + 
(write only) 
next interval (NICR) 
3 3 
1 @ 8765 4 3 1 @ 
+—-+------------------ -- - - - - - - - - - - - - - - - - - - - - +—4+-+4+-+-+----- +—+ 
|E | IIT IJITISIXI [R | 
IR | MBZ INIEIGIF| MBZ |U| 
[R | IT] ILIRI IN | 
$-$-------------- - -- - - - - - - - - - - - - - - - - - - - - - - - = +—-+-4+-+-+----- +—+ 
W WRWW R 
C C WOO W 


Interval Clock Control/Status (ICCS) 


1. Interval Count - The interval register is a read only register 
incremented once every microsecond. It is automatically loaded 
from NICR upon a carry out from bit 31 (overflow) which also 
interrupts at IPL 24 if the interrupt is enabled. 


2. Next Intérval Count - The reload register iS a write only 
register that holds the value to be loaded into ICR when it 
overflows. The value is retained when ICR is loaded. NICR is 
capable of being loaded regardless of the current values of ICR 
and ICCS. 


3. Interval Clock Control Status (ICCS) - The ICCS7 register 
contains control and status information for the interval clock. 


RUN <@> When set, ICR increments each microsecond. When clear, 
ICR does not increment automatically. At bootstrap time, 
run is cleared. 
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XFR <4> A write only bit. Each time this bit is set, NICR is 
transferred to ICR. 


SGL <5> A write only bit. If RUN is clear, each time this bit is 
set, ICR is incremented by one. 


IE <6> When set, an interrupt request at IPL 24 is’ generated 
every time ICR overflows (INT is set). When clear, no 
interrupt is requested. Similarly, if INT is already set 
and the software sets IE, an interrupt is generated 
(i.e., an interrupt is generated whenever the function 
{IE AND INT} changes from @ to 1). 


INT <7> Set by hardware every time ICR overflows. If IE is set 
then an interrupt is also generated. An attempt to set 
this bit via MTPR clears INT, thereby reenabling the 
clock tick interrupt (if IE is set). 


ERR <31> Whenever ICR overflows, if INT is already set, then ERR 
is set. Thus, ERR indicates a missed clock tick. An 
attempt to set this bit via MTPR clears ERR. 


Thus, to setup the interval clock, load the negative of the desired 
interval into NICR. Then a MTPR #°X51,#ICCS will enable interrupts, 
reload ICR with the NICR interval and set run. Every "interval count" 
microseconds will cause INT to be set and an interrupt to be requested. 
The interrupt routine should execute a MTPR #°XC1,#ICCS to clear’ the 
interrupt. If INT has not been cleared (i.e., the interrupt has not 


been handled) by the time of the next ICR overflow, the ERR bit will be 
set. 


At bootstrap time, bits <6> and <@> of ICCS are cleared. The rest of 
ICCS and the contents of NICR and ICR are UNPREDICTABLE. 
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9.6 VAX-11/780 SPECIFIC REGISTERS 


Mne- 

Register Name monic Number Type Scope Init? 
Accelerator Control/Status ACCS 49 R/W CPU yes 
Accelerator Maintenance ACCR 4] R/W CPU no 
WCS Address WCSA 44 R/W CPU no 
WCS Data WCSD 45 R/W CPU yes 
SBI Fault/Status SBIFS 48 R/W CPU yes 
SBI Silo SBIS 49 R CPU no 
SBI Silo Comparator SBISC 58 R/W CPU yes 
SBI Maintenance SBIMT 51 R/W CPU yes 
SBI Error Register SBIER 52 R/W CPU yes 
SBI Timeout Address SBITA 53 R CPU == 
SBI Quadword Clear SBIQC 54 W CPU == 
Micro Program Breakpoint MBRK 6G R/W CPU no 


9.6.1 VAX-11/78@ Accelerator 


The VAX-11/78@ processor has an optional accelerator for a subset of the 


instructions. Two internal registers control the accelerator, ACCS and 
ACCR. 
ACCS is the accelerator contro] and status’ register. It indicates 


whether an accelerator exists, controls whether it is’ enabled, 
identifies its type and reports errors and status. At bootstrap time, 
the type and enable are set; the errors are cleared. 


332222 111 

189876 65 4 8 7 g 
+-+-+-+-+-+--------------------- +—-+------------- $--------------- + 
IEIMJUIOIRI |E | | | 
IRIBINIVIS| MBZ IN | MBZ | TYPE | 
IRIZIFIFIV| |BI | | 
+—+—-+-+-4-+--------------------- +-+------------- $—--------------- + 
R RRR R RO 

0 ood W 


Accelerator Control/Status (ACCS) 


TYPE <7:@> Read only field specifying the accelerator type as 
follows: 


Y) 
1 


No Accelerator 
Floating point accelerator 


Numbers in the range 2 through 127 are reserved _ to 
DIGITAL. Numbers in the range 128 through 255 are 
reserved to CSS/customers. 
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ENB <15> 
RSV <27> 
OVE <28> 
UNF <29> 
ERR <3l1> 
ACCR the 
accelerator's 
UNPREDICTABLE. 
3 3 
1 @ 
+-+------------- 
|E | 
|v | MBZ 
IL | 
4+—-4+------------- 
W 
O 
PC <O:8> 
MPM <14> 
EML <15> 


TRAP <16: 23> 


Read/write field specifying whether the accelerator is 
enabled. At bootstrap time, this is set if the 
accelerator is installed and functioning. An attempt to 
set this if no accelerator is installed is ignored. 


Read only bit specifying that the last operation had a 
reserved operand. 


Read only bit specifying that the last operation had an 
overflow. 


Read only bit specifying that the last operation had _ an 
underflow. 


Read only bit specifying that at least one of bits’ RSV, 
OVF, and UNF is~ set. Note that bits <31:27> are 
normally cleared by the main processor microcode before 
starting the next macro instruction. 


accelerator maintenance register. Tt controls the 
microprogram counter. At bootstrap time its contents are 


2 l11liiu 

3 65 4 3 9 8 Q 
+--------------- +-+-+---------- -—----------------- + 
| IE IMI | | 
| TRAP ADDRESS |[MI|P] MBZ | MICRO PC | 
| IL IM] | | 
+--------------- +—-+-+4+--------— $—----------------- + 

RW WR RW 
00 


Accelerator Maintenance Register (ACCR) 


NEXT MICRO PC on read. This contains the next micro 
address to be executed. 


MATCH MICRO PC on write. If EML is also set, then this 
updates the micro PC match register. 


MICRO PC MATCH. A read only bit that is set whenever 
the accelerator's micro PC matches the micro PC match 
register. This is useful primarily as a scope. sync 
Signal. 


ENABLE MICRO PC MATCH LOAD. A write only bit that when 
set causes <8:0@> to be loaded into the accelerator's 
micro PC match register. 


TRAP ADDRESS. A’ read/write field used by the main 
processor to force the accelerator to a specified micro 
location. 
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ETL <31> ENABLE TRAP ADDRESS LOAD, A write only bit that when 
set causes <23:16> to be loaded into the accelerator's 
trap address register. Subsequently, the main 


processor's micro code can force the accelerator to trap 
to this location by asserting an internal signal. 


9.6.2 VAX-11/78@ Micro Control Store 


The VAX-11/78@ processor has three registers for control/status of its 
microcode. Two are used for writing into any writable control store 
(WCS) and one is used to control micro breakpoints. 


3 111141 

l 6543 2 Q 
+—----—-------—~-—----~--- - + - - - +-+--- +—------------------------ + 
| IP | | | 
| MBZ [I |CTR| WCS ADDR | 
| IN | | | 
+-------------------- - ---------- +—-4---+-—--—----—-—-—---------------- + 

R RW RW 
W 
Writable Control Store Address (WCSA) 

3 

1 Qg 
+---------------------- - - - - - - - - - - - - + + 
| WCS Data | 
+—------------—-—- ~~ -—------ - - + 

(on Write) 

3 

1 8 7 4) 
$—————— —- —- + $---—--—---------- + 
| Q | PRESENT | 
+—-------—---~-—-—-—---------- - - - - - ~~ - - +--+ $—-—-----—--------- + 

(on read) 
Writable Control Store Data  (WCSD) 

Reading WCSD indicates which control store addresses are writable. If 


WCSD<n> is set, then addresses n*1924 through n*1824+1823 are writable 
(i.e., that WCSA<12:18> EQLU n corresponds to writable control _ store). 
n=4 corresponds to WCS that is reserved to DIGITAL for diagnostics and 
engineering change orders. Other fields correspond to blocks of control 
that can be used to implement customer or CSS specific microcode. Each 
word of control store contains 96 bits plus 3 parity bits. To write one 
Or more words, initialize WCS ADDR to the address and CTR to 98. Then 
each MTPR to WCSD will write the next 32 bits and automatically 
increment CTR. When CTR would become 3, it iS automatically cleared and 
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WCS ADDR is incremented. If PIN is set, then any writes to WCSD are 


done with inverted parity. An attempt to execute a microword with bad 
parity results in a machine check. At bootstrap time, the contents of 
WCSA are UNPREDICTABLE. 


(read/write) 
Micro Program Breakpoint Address (MBRK) 


Whenever the microprogram PC matches the contents of MBRK, an_ external 
Signal is asserted. If the console has enabled stop on microbreak, then 
the processor clock is stopped when this signal is asserted. If the 
console has not enabled microbreak, then this signal is available as a 
diagnostic scope point. Many diagnostics use the NOP instruction to 
trigger this method of giving a scope point. At bootstrap time, the 
contents of MBRK are UNPREDICTABLE. 


9.6.3 SBI FAULT/STATUS REGISTER (SBIFS) 

3322222 2 21i1i1ii1id4di1 

18998765 4 998765 g 
+—+—+—-+-+-+-+-+--------- +—+-4+-+-+------- -- - - - - - - - - - - - - - - - - - -- + 
[PIMIUIMIMIXIN| ILITISIS| | 
ITIBINIBILIMIS|  MBZ ITINITIII MBZ | 
IYIZIXIZITITIT [IHITIGILI | 
+—-+—-+-+-—4+-+-+-+--------- +-—+-+-+-+------------------------------- + 
R R R R W R W 

O O O00 C oc 

15:@ MBZ 
16 SIL SILO FLT LOCK Fault Silo Lock 

(set 1£ Silo Locked due to Fault Signal) 

17 SIG SIG FLT Fault Signal 
18 INT INT FLT EN Fault Interrupt Enable 
19 LTH LTH FLT Fault Latch 
20:24 MBZ 
25 NST NST ERR Nested Error 
26 XMT XMT FLT Transmitter during Fault cycle 
27 MLT MLT XMT Multiple Transmitter Fault Flag 
29 UNX UNX RD Unexpected read Data Fault Flag 
31 PTY PTY FLT SBI Parity Fault Flag 
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9.6.4 SBI SILO DATA REGISTER (SBIS) 


The SBI Silo is a history of the state of the indicated SBI signals’ for 
the past 16 SBI cycles. The silo is updated every cycle until FAULT is 
asserted on the SBI or an SBI Silo Comparator match occurs. Each entry 
in the silo has the following format: 


3 3 2 2 2 2 2 Le d- < 
169 5 4 21 8765 4) 
+—-+-+-—-—------- +----- +------- +——--4----------- - - -- - - - - - -- - - - - - - + 
[AIT | | | | | | 
[FIN | ID | TAG | SBI | CNF | SBI TR<15:9%> | 
TIT | | | | | | 
+—-4+-+--------- +—----- +—------ +—-—--+---------—---- ---- - - - - - - - ------- + 
READ ONLY 
@:15 SBI TR SBI Transmit/Receive Lines 
17:16 CNFE SBI CNF1-@ SBI Confirmation Lines 
21:18 SBI SBI M3-M®@ SBI bits 21-18 are written 
OR B31-B28 with SBI B31-B28 when SBI 
TAG FIELD specifies command 
address TAG. Otherwise, M3-M@ 
are written in this field. 
24:22 TAG SBI TAG 
29:25 ID SBI IDI 
30 INT INTLK SBI Interlock 
31 AFT AFT FLT First Entry after FAULT cleared 


9.6.5 SBI SILO COMPARATOR REGISTER (SBISC) 


The Silo Comparator allows the SBI to become locked when pre specified 
conditions are detected. Conditional and unconditional lock modes are 
provided by the Silo Comparator. 
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3 32°22 °2 2 2 21 11 

19987 6 3.2 99 6 5 Q 
+—-+-+4+-+4+-—--+4+--—----- +----- +—------- +—-—----------—-—---- - - -- - —- - - --- - - + 
IC]I|L] L |COMPARE| COMP] COUNT | | 
IMIN|IC] O | CMD OR| | | MBZ | 
IP|TIK| C | MASK | TAG | FIELD | | 
+-+-+-+4+---4------- +----- +—------- +—-—-—---------——-—--- ~~ + 
* 

*CLEARED ON ANY WRITE TO SBISC 

15:90 MBZ 

19:16 COUNT FIELD 

22: 20 COMPARE TAG 

26323 COMPARE CMD or MASK Command or Mask 

28:27 LOC LOCK COND CODES Conditional Lock Codes 

29 LCK LCK UNCOND Lock Unconditional 

30 INT INT EN Silo Lock Interrupt Enable 
31 CMP CMP SILO LOCK Compare Silo Lock 


9.6.6 SBI MAINTENANCE REGISTER (SBIMT) 


The SBI Maintenance register allows error conditions to be forced for 
diagnostic purposes. 
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a3: 22.2 22.2: 2 do cdi ae Ae oe a 

189 8 7 32196 5432190987 
+—+—-+-4+-4+---------4-4-4-- - - - - - 4-4-4 - $+ - +--+ - + - + - - - - $+ 
[PIwilU [MI ITIEI IFIFIFIFIDIPIGIGIT| | 
IS|IRINIL] MAINT IDININ] REV IGIGIRIRISI1ILIGIII MBZ | 
| ITIXITI IVII| I@11I@I1IBI | | IMI | 
+—+-+-+-4+--------- 4-4-4 -- - - - - - 4+ - 4+ - +--+ - + - 4+ - +--+ - + - + - - - - - - - -  t 
R RRR R R R R RRRRR 

0000 e) OO @) 00000 

O:7 MBZ 

8 TIM TIME F OUT Force Timeout on Read 

9 GO G@ MAT Group 8 Match 

10 Gl Gl MAT Group 1 Match 

11 Pl REV SBI Pl Force Pl reversal on SBI 

12 DSB DSBL SBI CYC Disable SBI Cycles 

13 FR1 F Gl REP Force Cache Replacement Group l 
14 FRO F GO REP Force Cache Replacement Group @ 
15 FG1l F Gl MISS Force Cache Miss Group 1 

16 FG@ MISS F G@ Force Cache Miss Group 9@ 

20:17 REV REV CACHE 

PAR FIELD Reverse Cache Parity Field 

21 ENI EN SBI INV Enable SBI Invalidate 

22 INV INV F SBI Force SBI Write Invalidate to Cache 
27:23 MAINT ID Maintenance ID - to force faults 

and as SILO Comparator 

28 MLT MLT F XMIT Force Multiple Transmitter Fault 
29 UNX UNEX F RD Force Unexpected Read Data Fault 
30 WRT WRT F SEQ Force Write Sequence Fault 

31 PQ P@ REV SBI Force P@ Reversal on SBI 
9.6.7 SBI ERROR REGISTER (SBIER) 


Page 9-21 
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3 dk 1-T, 2-1-2 

1 654321098765 4321 84 

+--—----—-—---—- - - - —- - - — — — — — — fata a + = + - + - 4 

| ICICIRICICP IMICIIIIJIB |IIMIIIMI 

| MBZ IITIRIDIPITIMIBIE|IR|IBITIMIE|LIN|BI 

| IEIDIS| JouT|zicl | loutT|c|T|BIz| 

+-—-------—~-~------—-— — —- — — — — — — — — — ff a a ae $$ HF 
WWWRR RWW R RRR 
CC COO OCC O 00 0 

4) MBZ 

1 INB INT NOT BSY SBT SBI Interface Not Busy 

2 MLT MLT CP ERR Multiple CP Error 

3 IEC IB SBI CNF ERR Error Confirmation 

5:4 IB TIM OUT 

IB TIME OUT STATUS 

6 IB IB TIME OUT 

7 IR IB RDS 

8 CEC CP SBI CNF ERR Error Confirmation 

9 MBZ 

11:16 CP TIM OUT 

CP TIME OUT STATUS 
12 CP CP TIME OUT 
13 RDS Read Data Substitute - 


set whenever RDS is 
returned to CPU. 

14 CRD CRD (Corrected Read Data) 
is set whenever CRD is 
returned to CPU. 

15 CIE CRD INT EN RDS CRD/RDS Interrupt Enable 


31:16 MBZ 


9.6.8 SBI TIMEOUT ADDRESS (SBITA) 


This register is a holding register for the Physical Address sent on the 
SBI. When a timeout occurs on the SBI, this register will latch up with 
the physical address of the timeout. It is reset by clearing bit 12 of 
the SBI error register. 
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3: 3332.2 2 

10898 7 Qg 
$—+—+-4+-+------------- - - - -- - - - - - - - - - - - - - - - - - + +--+ + 
IMIMIP] | | 
llI@i[clal PHYSICAL ADDRESS <29:2> | 
+---+-4-+4---------------- -- - - - - - - - - - - - - - - - - - + +++ + 

READ ONLY 

27:0 PHYSICAL ADDRESS <29:2> 

28 g 

29 PC NO PROT CHK Protection checked reference. 
390 M@ Mode @ reference 

31 M1 Mode 1 reference 
9.6.9 SBI QUAD CLEAR (SBIQC) 

3 32 

169 3 2 Qg 
$—---4------------ -- - - - - + $----- + 
|MBZ | PHYSICAL QUADWORD ADDRESS | MBZ | 
$—-—-—-4}----------------- --- - -- -- -- - -- - - - - - - - - - - - - - -- -- + ----- $----- + 


WRITE ONLY 
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9.7 VAX-11/750 SPECIFIC REGISTERS 


Mne- 
Register Name monic Number Type Scope Init? 
CMI Error Register CMIERR 23 R CPU yes 
Console Storage Receiver Status CSRS 28 R/W CPU yes 
Console Storage Receiver Data CSRD 25 R CPU <= 
Console Storage Transmit Status CSTS 30 R/W CPU yes 
Console Storage Transmit Data CSTD 31 W CPU =-- 
Translation Buffer Disable TBDR 36 R/W CPU -~ 
Cache Disable CADR 37 R/W CPU -- 
Machine Check Error Summary MCESR 38 R/W CPU == 
Cache Error CAER 39 R/W CPU -— 
Accelerator Control/Status ACCS 4 R/W CPU -- 
Initialize UNIBUS IORESET 55 W CPU = 
Translation Buffer Data TBDATA 59 R/W CPU -— 
9.7.1 CMI Error Register 
3 2.2: 1 il 111i 
1 199 6 5 3 21 8 7 5 4 3 4) 
+--------------------- +-4+------- +----- +-+------- +----- +—-+------- + 
| M | | smMR | 6 | | TBGPR | ® | | BER | 
$--------------------- +—-+------- +----- +-+------- +----- +-+------- + 
0:3 BER Bus Error 
) Corrected Data Error 
1 Lost Error 
2 Uncorrectable Data Error 
3 Non-existent memory 
4 TBHIT TB hit on last reference 
11:8 TBGPR TB Group Error 
8 TB Group @ Data error 
9 TB Group 1 Data Error 
10 TB Group @ Tag Error 
ll TB Group 1 Tag error 
12 RLTO Read Lock Timeout 
18:16 SMR Saved Mode Register 
17:16 Processor access mode for last reference 
18 Virtual=8, Physical=1 


28 CMIDIS Disable CMI references 
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9.7.2 Console Storage Device Registers 


The VAX-11/7598 accesses the console storage device through four internal 
registers that are distinct from those used to access the console 
terminal. The architecture of these registers is similar to that of the 
console terminal registers. 


3 
1 876 5 g 
+—---------------------- - -- - - - - -- - - - - - - - - - - - +—-+-+----------- + 
| IDITI | | 
| MBZ lOIE | MBZ | 
| IN] | | 
+---------------------- - -- - - - - - - - - - - - - - - - - +—-4+-+-—---------- + 
R R 
OW 
Console Storage Receive Status (CSRS) 
3 
1 8 7 Q 
+----------------—--- - - -- - - - - -- - - - - - - - - - - $—-—-------—------- + 
| g | DATA | 
4+----------~--------- - - - - - - - - - - - - - - - - - - - - - - - - --- $—-—-------------- + 
(read only) 
Console Storage Receive Data Buffer (CSRD) 
3 
1 8 765 1 @ 
+------------------- - - - - - - - - - - - - - - - - - - - - - - - ----- +—-+-+--------- —+ 
| IRIT | [BI 
| MBZ IDIE] MBZ [R | 
| Iv! | IK | 
+---------------------------- ----- ------------ -- +-+-+--------- +—+ 
R R W 
OW O 
Console Storage Transmit Status (CSTS) 
3 
1 8 7 Q 
4+------------------- ~~ - - - - - - - - - - - - - - - - - - - - - - == +—--------------- + 
| M | DATA | 
4+—------------------- --- - -- - - - - - - - - - - - - - - - - - - $—--------------- + 


(write only) 
Console Storage Transmit Data Buffer (CSTD) 
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9.7.3 Translation Buffer Group Disable Register (TBDR) 


3 
ii 432186 
+------ - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - +—+-—+-+-+ 
| ty) I | tt 
+-----~----—~-------------------- - - -- - - - - - - - - - - - - - - -- - - - +—+-+-+-+ 
GB Force Miss Group #@ 
1 Force Miss Group l 
2 if {<3> EQL 1} then this bit selects group to be replaced 
3 @ = Random replacement, 1 = Force replacement 


9.7.4 Cache Disable Register (CADR) 


3 

1 1 @ 
$----------------- ---- +--+ - +--+ +--+ +—+ 
| MBZ | | 
+------------—-—----—- - --— - - - - - - - - +—+ 
Q Disable cache 


9.7.5 Machine Check Error Summary Register (MCESR) 


4) Reference was through prefetch logic 
2 TB parity error 
3 Bus error 


9.7.6 Cache Error Register (CAER) 
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3 

1 432198 
+------------------- -- -- -- - - - - - - - - - - - - - - - - - - - - - - - - - +—-+-+-+-+ 
| p tr | te tid 
+----------~-------- -- - - -- - -- - - - - - - - - - - - - - - - - - - - - - +—+—-+-+-+ 
g Cache hit 
1 Lost error 
2 Cache data parity error 
3 Cache Tag parity error 


9.7.7 Accelerator Control/Status Register 


The accelerator control and status register on the VAX-11/750 is a 
subset of the ACCS on the VAX-11/78@. 


3 111 
1 6 5 4 8 7 Q 
po—----- - -- - - - - - + +--+ + $—$—------------ fo + 
| JE | | | 
| MBZ IN | MBZ | TYPE | 
| [BI | | 
$--------- --- - + +-+------------- fone + 
W RO 
O 
<7: 90> TYPE Q no accelerator or disabled 


L Floating Point Accelerator (FPA) 

Numbers in the range 2-127 are reserved to DIGITAL. 

Numbers in the range 128-255 are reserved to CSS/customers. 
<15> ENB Enable FPA. 


ACCS<15> always reads as @. To determine if an FPA is present, write a 
1 to ACCS<15> and then read ACCS<@>. If there is no FPA, ACCS<@> will 
read as @. 


9.7.8 Initialize UNIBUS (IORESET) 


<O> Initialize Unibus 
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9.7.9 Translation Buffer Data Register (TBDATA) 


This internal processor register is used to read and write locations’ in 
the TB. On a MFPR to this’ register, the page table entry for the 
virtual address in P@BR is read from the TB into the destination. On a 
MTPR, the source operand is written into the TB as the page table entry 
for the virtual address in P@BR. The results of an MTPR/MFPR on the 
register are UNPREDICTABLE if memory management is enabled. 


CHAPTER 10 
PDP-11 COMPATIBILITY MODE 


23-March-8l1 -- Rev 5.2 


10.1 INTRODUCTION 
VAX compatibility mode hardware, in conjunction with a compatibility 
mode software executive (which runs in VAX mode), can emulate the 
environment provided to user programs on a PDP-ll. This environment 
excludes the following features of normal PDP-11 operation: 

1. Privileged instructions such as HALT and RESET. 


2. Special instructions such as traps and WAIT. 


3. Access to internal processor registers (e.g., PSW and_ console 
Switch register). 


4. Direct access to trap and interrupt vectors. 
5. Direct access to I/O devices. 

6. Interrupt servicing. 

7. Stack overflow protection. 

8. Alternate general register sets. 


9. Any processor mode other than user (i.e., Kernel and Supervisor 
modes are not supported) and separate I and D spaces. 


19. Floating point instructions. 


This specification is based on the behavior of all PDP-11 
implementations. Compatibility mode behavior is defined as 
UNPREDICTABLE where there is a difference between any two PDP-1l 
implementations. 
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10.2 COMPATIBILITY MODE USER ENVIRONMENT 

1@.2.1 General Registers And Addressing Modes 

All of the PDP-11l general registers and addressing modes are provided in 
compatibility mode. Side effects caused by a destination address 
calculation have no effect on source values (except in JSR), and 
auto-increment modes in JMP and JSR do not affect the new PC. However, 
side effects caused by a Source address calculation might affect the 
value of a eregister used for destination address calculation. All 


PDP-l11l addresses are 16 bits wide. In compatibility mode, a 16-bit 
PDP-ll address is zero-extended to 32 bits. 


18.2.1.1 Register Mode - 


The addressing format for register mode is: 


In register mode addressing, the operand is the contents of register n: 
operand = Rn 

Byte operations, except for MOVB to a register, access the low order 

byte, i.e. bits <7:0>. The low byte is sign-extended if a register is 

used as the destination of a MOVB instruction. If the PC is used as the 

destination of a byte instruction, the result is UNPREDICTABLE. 


The assembler notation for register mode is Rn. 


19.2.1.2 Register Deferred Mode - 


The addressing format for register deferred mode is: 


In register deferred mode addressing, the address of the operand is’ the 
contents of register n: 


operand = (OA) 
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The assembler notation for register deferred mode is (Rn) or @Rn. 


186.2.1.3 Autoincrement Mode - 


The addressing format for autoincrement mode is: 


If Rn denotes PC, immediate data follows the instruction, and the mode 
is termed immediate mode. 


In autoincrement mode addressing, the address of the operand is’ the 
contents of register n. After the operand address is determined, the 
Size of the operand in bytes (1 for byte; 2 for word) is added to the 
contents of register n (except in the case of SP and PC), and the 
register is replaced by the result. If Rn denotes SP or PC, the 
register is incremented by 2 and the register is replaced by the result. 


lif n LEQ 5 then Rn <- Rn + size else Rn <- Rn + 2 
operand = (OA) 
The assembler notation for autoincrement mode is (Rn)+. For immediate 


mode the notation is #constant where constant is the immediate data 
which follows the instruction. 


19.2.1.4 Autoincrement Deferred Mode - 


The addressing format for autoincrement deferred mode is: 


If Rn denotes PC, a 16-bit address follows the instruction, and the mode 
is termed absolute mode. 


In autoincrement deferred mode addressing, the address of the operand is 
the contents of a word whose address is the contents of register n. 
After the operand address is determined, 2 is added to the contents of 
register n, and the register is replaced by the result. 
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OA = (Rn) 
Rn <- Rn + 2 
operand = (OA) 
The assembler notation for autoincrement deferred mode is @(Rn)+. For 


absolute mode the notation is @#address where address is the word which 
follows the instruction. 


18@.2.1.5 Autodecrement Mode - 


The addressing format for autodecrement mode is: 


In autodecrement mode addressing, the size of the operand in bytes (1 
for byte; 2 for word) is subtracted from the contents of register n 
(except in the case of SP and PC), and the register is replaced by the 
result. If Rn denotes SP or PC, the register is decremented by 2 and 
the register is replaced by the result. The updated contents of 
register n is the address of the operand: 


if n LEQ 5 then Rn <- Rn - Size else Rn <- Rn - 2 


operand = (OA) 


The assembler notation for autodecrement mode is -(Rn). 


18.2.1.6 Autodecrement Deferred Mode - 


The addressing format for autodecrement deferred mode is: 


In autodecrement deferred mode addressing, 2 is subtracted from the 
contents of register n, and the register is replaced by the result. The 
updated contents of register n is the address of the word whose contents 
is the address of the operand: 
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Rn <- Rn - 2 
OA = (Rn) 
operand = (OA) 


The assembler notation for autodecrement deferred mode is @-(Rn). 


10.2.1.7 Index Mode - 


The addressing format for index mode is: 


5 3 2 Q 
+----- +----- + 
| 6 | Rn | 
$----- $—----- + 
In index mode, the index (contents of the _ word following the 


instruction) is added to the contents of register n. The result is the 
address of the operand: 


OA = Rn + index 
operand = (OA) 


If Rn denotes PC, the updated contents of the PC is used, and the mode 
is termed relative mode. 


The assembler notation for index mode is index(Rn), where the index 
value is the word following the instruction. 


16.2.1.8 Index Deferred Mode - 


The addressing format for index deferred mode is: 


In index deferred mode, the index (contents of the word following the 
instruction) is added to the contents of register n. The result is the 
address of a word whose contents is the address of the operand: 

OA = (Rn + index) 


operand = (OA) 
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If Rn denotes PC, the updated contents of the PC is used, and the mode 
is termed relative deferred mode. 


The assembler notation for index deferred mode is @index(Rn), where’ the 
index value is the word following the instruction. 


18.2.2 The Stack 


General register R6 is used as the _ stack pointer by certain 
instructions, as in the PDP-ll. It is not, however, used by the 
hardware for any exceptions or interrupts. There is also no_- stack 
overflow protection in compatibility mode. 


19.2.3 Processor Status Word 


PDP-11 compatibility mode uses a subset of the full PDP-1l Processor 
Status Word. The format of the compatibility mode PSW is: 


1 

5 543218 
$--------------------- +—f—+—+—+—+ 
| Q ITIN|ZIVIcl 
4+--------------------- +—t—+—+-+-+ 


When an RTI or RTT instruction is executed, bits 15 through 5 in the 
saved PSW on the stack are ignored. 


PDP-11 Compatibility Mode 


18.2.4 


Instructions 


23-March-81l 
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Table 18.1 lists the instructions provided in compatibility mode. 


register specifier 
source operand specifier 
destination operand specifier 

@ for word operations and 1 for byte operations 


Condition codes 


TABLE 10.1 
Compatibility Mode Instructions 
Opcode Mnemonic 
(octal) 
GBGBG2 RTI 
GOSOHSE RTT 
G081DD JMP 
GBSG2GR RTS 
G68240-000277 
@883DD SWAB 
G08400-093777 Branches 
18888080-1803777 Branches 
884RDD JSR 
-858DD CLR (B) 
-@51DD COM (B) 
-8@52DD INC (B) 
-@53DD DEC (B) 
-@54DD NEG (B) 
~-855DD ADC (B) 
-@56DD SBC (B) 
-857SS TST (B) 
-8658DD ROR (B) 
-861DD ROL (B) 
~-852DD ASR (B) 
-863DD ASL (B) 
@865SS MFPI* 
@G66DD MTPI* 
1865SS MFPD* 
1066DD MTPD* 
8867DD SXT 
@78RSS MUL 
871RSS DIV 
872RSS ASH 
873RSS ASHC 
874RDD XOR 
877RNN SOB 
- LSSDD MOV (B) 
~-2SSSS CMP (B) 
- 3SSSS BIT (B) 
-4SSDD BIC (B) 
-5SSDD BIS (B) 
G6SSDD ADD 
16SSDD SUB 
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* These instructions execute exactly as they would on a PDP-1l in user 
mode with Instruction and Data space overmapped. More specifically, 
they ignore the previous access level and act like PUSH and_ POP 
instructions referencing the current stack. 


Table 18.2 lists the trap instructions that cause the machine to fault 
to VAX mode, where either the complete trap may be serviced, or where 
the instruction may be simulated. 


TABLE 10.2 
Compatibility Mode Trap Instructions 


Opcode Mnemonic 
(octal) 


GBO9B03 BPT 
GBGBH4 LOT 
194800-194377 EMT 
104408-184777 TRAP 


The instructions listed in Table 18.3 and all other opcodes not listed 
in Tables 180.1 or 18.2 are considered reserved instructions in 
compatibility mode, and fault to VAX mode. See Section 19.5. 


TABLE 10.3 
Compatibility Mode Reserved Instructions 
Opcode Mnemonic 
(octal) 
GBZOSHO HALT 
GGOHG1 WAIT 
GBBBH5 RESET 
GB8GO07 MF PT 
G8G23N SPL 
ZGO4NN MARK 
878DD CSM 
@7580R FADD--FIS 
97501R FSUB--FIS 
075@2R FMUL--FIS 
@75083R FDIV--FIS 
@76XXX Extended Instructions 
1664SS MTPS 
1867DD MEPS 
17XXXX FP11 Floating Point 


Note that no floating point instructions are included in compatibility 
mode. 
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1@.2.4.1 Single Operand Instructions - 


Arithmetic and Logical: 


CLR DEC INC NEG TST COM 
CLRB DECB INCB NEGB TSTB COMB 
Shifts: 

ASR ASL 

ASRB ASLB 

Multiprecision: 

ADC SBC SXT 

ADCB SBCB 

Rotates: 

ROL ROR SWAB 


ROLB RORB 


-- Rev 5.2 
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CLR Clear 
Formats: 
1 
5 6 5 4) 
4+—-—----—----—-—--------- +—----------- + 
| Opcode | dst.wx | 
+------—-------—------ $—-—-—------- + 


Operation: 
dst <- @; 


Condition Codes: 


N <- @; 
Z<- l; 
V <- @; 
C <- 0; 


Exceptions: 
none 
Opcodes (octal): 


0050 CLR Clear Word 
19858 CLRB Clear Byte 


Description: 


The destination operand is replaced by zero. 
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DEC 


Format: 


Operation: 


Condition Codes: 


N <- 
ZL <= 
V< 
Cc <= 


Exceptions: 


hone 


Opcodes (octal): 


0853 


Decrement 
6 5 ) 
—--------------- +-----------+ 
Opcode | dst.mx | 
—--------------- +—-----------+ 
dst <- dst - 1; 
dst LSS @; 
dst EQL @; 
{integer overflow}; 
C; 
DEC Decrement Word 
DECB Decrement Byte 


1953 


Description: 


One is subtracted from the destination operand and 
operand is replaced by the result. 


Note: 


the 


Integer overflow occurs if the largest negative integer is 
On overflow, the destination operand is replaced by the largest positive 


integer. 
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destination 


decremented. 
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INC Increment 
Format: 
i 
5 6 5 4} 
$------------------- 4+----------- + 
| Opcode | dst.mx | 
4+—--------—----------- +—-—--—-—-----—--— + 


Operation: 
dst <- dst + 1; 
Condition Codes: 
N <- dst LSS @; 
Z <- dst EQL @; 
Vv <- {integer overflow}; 
C <= C; 
Exceptions: 
none 


Opcodes (octal): 


8852 INC Increment Word 
1952 INCB Increment Byte 


Description: 


One is added to the destination operand and the destination operand is 
replaced by the result. 


Note: 
Integer overflow occurs if the largest positive integer is incremented. 


On overflow, the destination operand is replaced by the largest negative 
integer. 
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NEG Negate 
Format: 
1 
5 6 5 g 
$------------------- $----------- + 
| Opcode | dst.mx | 
+------------------- $—----------- + 


Operation: 
dst <- -dst; 
Condition Codes: 
N <- dst LSS @; 
Z <- dst EOL @; 
V <- dst EQL most negative integer; 
C <- dst NEQ @; 
Exceptions: 
none 


Opcodes (octal): 


9054 NEG Negate Word 
1954 NEGB Negate Byte 


Description: 


The destination operand is negated (2'S complement) and the destination 
operand is replaced by the result. 


Note: 


Integer overflow occurs if the operand is the most negative integer 
(which has no- poSitive counterpart). On overflow, the destination 
operand is replaced by itself. 
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TST Test 
Format: 
l 
5 6 5 4) 
$-----~------------- $~---------+~-- + 
| Opcode | sre.rx | 
$------------------- $a + 


Operation: 
sre - @; 
Condition Codes: 


N <- sre LSS @; 


Z <- src EQL @; 
V <- @; 
C <- @; 


Exceptions: 
none 
Opcodes (octal): 


8057 TST Test Word 
1857 TSTB Test Byte 


Description: 


The condition codes are affected according to the value of the source 
operand. 
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COM Complement 
Format: 
1 
5 6 5 4) 
$------------------- +----------- + 
| Opcode | dst.mx | 
+——------------------ +----------- + 


Operation: 

dst <- NOT dst; 
Condition Codes: 

N <- dst LSS @; 

Z <- dst EQL @; 

V <- @;3 

C <- 1; 
Exceptions: 

none 


Opcodes (octal): 


0051 COM Complement Word 
1951 COMB Complement Byte 


Description: 


The destination operand is complemented (1'S complement) and_ the 
destination operand is replaced by the result. 
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ASR Arithmetic Shift Right 
Format: 
1 
5 6 5 y 
$------------------- +----------- + 
| Opcode | dst.mx | 
$------------------- pon na + 


Operation: 

dst <- dst shifted one place to the right; 
Condition Codes: 

N <- dst LSS @; 

Z <- dst EQL @Q; 

V <- {bit shifted out} XOR {dst LSS 9}; 

C <- bit shifted out; 
Exceptions: 

none 


Opcodes (octal): 


G62 ASR Arithmetic Shift Right Word 
1962 ASRB Arithmetic Shift Right Byte 


Description: 


The destination operand is arithmetically shifted right by one bit and 
the destination operand is replaced by the result. 


Notes: 


1. The sign bit of the destination operand is replicated in shifts 


to the right. The condition code C bit stores the bit shifted 
out. 


2. If the PC is used as the destination operand, the result and 
the next instruction executed are UNPREDICTABLE. 
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ASL Arithmetic Shift Left 
Format: 
1 
5 6 5 4} 
+—-—--—--—--—--~--~-~~-~-~-~-~ +—----—------- + 
| Opcode | dst.mx | 
$o-—--—---------------- +----------- + 


Operation: 

dst <- dst shifted one place to the left; 
Condition Codes: 

N <- dst LSS @; 

Z <- dst EQL @; 

V <- {integer overflow}; 

C <- bit shifted out; 
Exceptions: 

none 


Opcodes (octal): 


8063 ASL Arithmetic Shift Left Word 
1863 ASLB Arithmetic Shift Left Byte 


Description: 


The destination operand is arithmetically shifted left by one bit = and 
the destination operand is replaced by the result. 


Notes: 


1. The least significant bit is filled with zero in shifts to’ the 
left. The condition code C bit stores the bit shifted out. 


2. Integer overflow occurs if the destination changes sign due to 
the shift. 
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ADC Add Carry 


Format: 


Operation: 


dst <- dst + C; 


Condition 


N 


Z 
V 
C 


Codes: 


<- dst LSS @; 

<- dst EQL @; 

<- {integer overflow}; 

<- {carry from most significant bit}; 


Exceptions: 


none 


Opcodes (octal): 


8055 ADC Add Carry to Word 
1855 ADCB Add Carry to Byte 


Description: 


The contents of the condition code C bit are added 


the 
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destination 


operand and the destination operand is replaced by the result. 


Note: 


Integer overflow occurs if the most positive integer is incremented. On 


overflow, 


the result is the most negative integer. 
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SBC Subtract Carry 
Format: 
1 
5 6 5 4 
+------------------- +—-----------— + 
| Opcode | dst.mx | 
+------------------- +----------- + 


Operation: 

dst <- dst - C; 
Condition Codes: 

N <- dst LSS @; 

Z <- dst EQL @; 

V <- {integer overflow}; 

C <- {borrow into most significant bit}; 
Exceptions: 

none 


Opcodes (octal): 


056 SBC Subtract Carry from Word 
1856 SBCB Subtract Carry from Byte 


Description: 
The contents of the condition code C bit are subtracted from _ the 
destination operand and the destination operand is replaced by the 


result. 


Note: 


Integer overflow occurs if the most negative integer is decremented. On 
overflow, the result is the most positive integer. 
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SXT Sign Extend Word 
Format: 
1 
5 6 5 4) 
a nee ee ree ee pee seas + 
| Opcode | dst.ww | 
pees See ees eee ee + 


Operation: 
lif N EOL 1 then dst <- -1 else dst <- @; 
Condition Codes: 
N <- dst LSS @; !IN <- N 
Z <- dst EQL @; 
V <- @;3 
C <= C; 
Exceptions: 
none 
Opcodes (octal): 
$867 SXT Sign Extend 


Description: 


If the condition code N bit is set then the destination operand 
replaced by -l; otherwise the destination operand is cleared. 


Note: 


If the PC is used as the destination operand, the results and the 
instruction executed are UNPREDICTABLE. 


is 


next 
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ROL Rotate Left 
Format: 
a 
5 6 5 y 
pone ---------------- ----------- + 
| Opcode | dst.mx | 
paa—---------- +--+ ~~ puo--------+- + 


Operation: 

dst'C <- dst'C rotated left; 
Condition Codes: 

N <- dst LSS @; 

Z <- dst EQL @; 

Vv <- {integer overflow}; 

C <- {bit rotated out of dst}; 
Exceptions: 

none 


Opcodes (octal): 


G61 ROL Rotate Left Word 
1961 ROLB Rotate Left Byte 


Description: 


The condition code C bit and the destination operand are rotated left by 
one bit position; i.e. the C bit gets the most Significant bit of the 
destination operand, the destination is replaced by the destination 


shifted left by one bit with the initial cC bit filling the least 
Significant bit. 


Notes: 


1. The rotate instructions operate on the destination operand and 
the condition code C bit taken as a circular datum. 


2. Integer overflow occurs if the destination changes sign due _ to 
the rotate. 
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ROR Rotate Right 
Format: 
l 
5 6 5 4 
+—------------------- $—----------- + 
| Opcode | dst.mx | 
$-------~----------- ban nnne ne + 


Operation: 

dst'C <- dst'C rotated right; 
Condition Codes: 

N <- dst LSS 9Q; 

Z <- dst EQL @; 

Vv <- {C bit changed due to rotate}; 

C <- {bit rotated out of dst}; 
Exceptions: 

none 


Opcodes (octal): 


G60 ROR Rotate Right Word 
1960 RORB Rotate Right Byte 


Description: 


The condition code C bit and the destination operand are rotated right 
by one bit position; i.e. the C bit gets the least significant bit of 
the destination operand, the destination is replaced by the destination 
shifted right by one bit with the initial C bit filling the most 
Significant bit. 


Note: 


The rotate instructions operate on the destination operand and_ the 
condition code C bit taken as a circular datum. 
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SWAB Swap Bytes 
Format: 
1 
5 6 5 g 
$------------------- +----------- + 
| Opcode | dst.mw | 
+---------—---------- +—----------- + 


Operation: 
dst <- dst<7:0>'dst<15:8>; 
Condition Codes: 
N <- dst<7:@> LSS @; 
Z <- dst<7:0> EQL @; 
V <- @; 
C <- @;3 
Exceptions: 
none 
Opcodes (octal): 
GBA3 SWAB Swap Bytes 


Description: 
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The high and low bytes of the destination word operand are swapped. 


Note: 


If the PC is used as the destination operand, the result 


Instruction executed are UNPREDICTABLE. 


the next 
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18.2.4.2 Double Operand Instructions - 


Arithmetic and Logical: 


MOV ADD SUB CMP MUL DIV 
MOVB CMPB 

Shift: 

ASH ASHC 
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XOR BIS BIC BIT 
BISB BICB BITB 


If a register that is used in the source operand specifier in 
autoincrement or autodecrement modes is also used in the destination (or 
source 2) operand specifier, the updated value of the register is used 


to evaluate the destination specifier. 


Side effects caused by a 


destination address calculation have no effect on Source values. 


PDP-11 Compatibility Mode 23-March-81 -- Rev 5.2 Page 19-25 
COMPATIBILITY MODE USER ENVIRONMENT 


MOV Move 
Format: 
1 11 
5 21 6 5 g 
+------- +----------- +—----------- + 
|Opcode | src.rx | dst.wx | 
4+------- +----------- 4+----------- + 
Operation: 
dst <- src; 
Condition Codes: 
N <- dst LSS @; 
Z <- dst EQL @; 
V <- @;3 
C <- C; 
Exceptions: 
none 
Opcodes (octal): 
G1 MOV Move Word 
1i MOVB Move Byte 


Description: 

The destination operand is replaced by the source operand. 

Note: 

The low byte is sign-extended on a MOVB to a register;i.e. bits <15:8> 


of the destination register are replaced by bit <7> of the source 
operand. 
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ADD Add 
Format: 
l 1 il 
5 21 6 5 g 
$------- $—----------- $-—--------- + 
|Opcode | src.rw | dst.mw | 
$—------ pose SaaS pm e ne + 


Operation: 

dst <- dst + src; 
Condition Codes: 

N <- dst LSS @; 

Z <- dst EQL @; 

Vv <- {integer overflow}; 

C <- {carry from most significant digit}; 
Exceptions: 

none 
Opcodes (octal): 

06 ADD Add Word 


Description: 


The source operand is added to the destination operand and _ the 
destination operand is replaced by the result. 


Note: 


Integer overflow occurs if the input operands have the same Sign and the 
result has the opposite sign. On overflow, the destination operand is 
replaced by the low order bits of the true result. 
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SUB Subtract 
Format: 
1 lil 
5 21 6 5 Q 
$o------ $--~-------~- $----------- + 
lOpcode | src.rw | dst.mw | 
+------- $o----------- $—----------- + 


Operation: 
dst <- dst - src; 
Condition Codes: 
N <- dst LSS @; 
Z <- dst EQL @; 
V <- {integer overflow}; 
C <- {borrow into most significant digit}; 
Exceptions: 
none 
Opcodes (octal): 
16 SUB Subtract Word 


Description: 


The source operand is subtracted from the destination operand and_ the 
destination operand is replaced by the result. 


Note: 
Integer overflow occurs if the input operands are of different signs and 


the result has the sign of the source. On overflow, the destination 
operand is replaced by the low order bits of the true result. 
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CMP Compare 
Format: 
l 1 il 
5 21 6 5 9 
+------- $—---------- $o---------- + 
lOpcode | srcl.rx | srce2.rx_ | 
+—------- po ---- $----------- + 


Operation: 

tmp <- srcl - src2; 
Condition Codes: 

N <- tmp LSS @; 

Z <- tmp EQL @; 

V <- {integer overflow}; 

C <- {borrow into most significant digit}; 
Exceptions: 

none 


Opcodes (octal): 


G2 CMP Compare Word 
12 CMPB Compare Byte 


Description: 


The source 1 operand is compared with the Source 2 operand. The only 
action is to set. the condition codes. 


Note: 


Integer overflow occurs if the operands are of different sign and _ the 


result of the subtraction (srcl - src2) has the same sign as the source 
2 operand. 
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MUL Multiply 
Format: 
l 
5 9 8 6 5 4 
$------------- +----- +—----------- + 
| Opcode | reg | sSre.rw | 
+------------- +----- $—-—--------- + 


Operation: 


tmp<31:8> <- Rn * src; 
Rn <- tmp<31:15>; 
R{n OR lj] <- tmp<15:@>; 


Condition Codes: 


N <- tmp LSS @ 
Z <- tmp EQL @ 
V <- @;3 

Cc <- {result unrepresentable in 16 bits}; 


me TO 


Exceptions: 
none 
Opcodes (octal): 
G70 MUL Multiply Word 
Description: 
The destination register is multiplied by the source operand. The most 
Significant 16 bits of the 32-bit product are stored in register Rn. 
Then the least significant 16 bits are stored in R[(n OR 1). The 
condition codes are set based on the 32-bit result. 
Note: 
1. The C bit is set if the result of the multiplication cannot be 
represented in 16 bits; i.e. the 32-bit product is less than 


—-2**15 or greater than or equal to 2**15, 


2. If an odd numbered register is used as the destination, the low 
order sixteen bits are stored as the result. 


3. If R6 or PC is used as the destination, the next instruction 
executed and the result are UNPREDICTABLE. 
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DIV Divide 
Format: 
1 
5 9 8 6 5 y 
4+------------- $——--- +—----------- + 
| Opcode | reg | src.rw | 
$-—--------~---- $----— $—---------- + 


Operation: 


tmp <- Rn'R[n OR 1] 
Rn <- tmp / src; 
R{n OR 1] <- REM(tmp , src); 


Condition Codes: 


N <- Rn LSS @; !'UNPREDICTABLE if V is set 
Z <- Rn EQL @; !'UNPREDICTABLE if V is set 
V <- {sre EQL @} OR {integer overflow}; 

Cc <- {sre EQL 0}; 


Exceptions: 

none 
Opcodes (octal): 

O71 DIV Divide 
Description: 
If the source operand is not zero, the 32-bit integer in Rn'R[n OR 1] is 
divided by the source operand. The quotient is stored in Rn, and the 
remainder is stored in R{n OR 1]. The remainder has the same sign as 
the dividend. If the source operand is zero, the instruction terminates 


without modifying the destination registers. 


Notes: 


1. Integer overflow occurs if the quotient is less than -2**15 or 
greater than or equal to 2**15, On integer overflow, the 
contents of the destination registers are UNPREDICTABLE. 


2. If an odd register or R6 is used as the destination, the 
results are UNPREDICTABLE. Furthermore, if R6 or PC is used as 


the destination, the next instruction executed is 
UNPREDICTABLE. 
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XOR Exclusive OR 
Format: 
1 
5 9 8 6 5 4) 
+——------------ +—----—- +—----------- + 
| Opcode | reg | dst.mw | 
+------------- $o----- +----------- + 


Operation: 

dst <- Rn XOR dst; 
Condition Codes: 

N <- dst LSS @; 

Z <- dst EQL @; 

V <- @; 

CC <=-C3 
Exceptions: 

none 
Opcodes (octal): 

G74 XOR Exclusive OR Word 


Description: 


The source register is XORed with the destination operand and _ the 
destination operand is replaced by the result. 
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BIS Bit Set 
Format: 
1 1 il 
5 21 6 5 4) 
+------- $----------- $----------- + 
|Opcode | src.rx | dst.mx | 
+------- $—----------- $—-—-—----- + 


Operation: 
dst <- dst OR src; 
Condition Codes: 


N <- dst LSS @ 


me Oe 


Z <- dst EQL @ 
V <- @; 
C <= C; 


Exceptions: 
none 
Opcodes (octal): 


@5 BIS Bit Set Word 
15 BISB Bit Set Byte 


Description: 


The source operand is ORed with the destination operand and _ the 
destination operand is replaced by the result. 
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BIC Bit Clear 
Format: 
1 11 
5 21 6 5 
+------- $----------- $----------- + 
lOpcode | src.rx | dst.mx 
+------- $----------- $—---------- + 


Operation: 
dst <- dst AND {NOT src}; 
Condition Codes: 


N <- dst LSS @; 


Z <- dst EQL @; 
V <- @;3 
C <- C?; 


Exceptions: 
none 


Opcodes (octal): 


G4 BIC Bit Clear Word 
14 BICB Bit Clear Byte 


Description: 


The destination operand is ANDed with the 1's complement of 
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the source 


operand and the destination operand is replaced by the result. 
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BIT Bit Test 
Format: 
i 1 il 
5 21 6 5 Gg 
$------- $----—---+-~~- $----------- + 
lOpcode | srcl.rx | srce2.rx | 
$—------- $—-—---------- $—----------- + 


Operation: 
tmp <- srcl AND src2; 
Condition Codes: 


N <- tmp LSS @; 


Z <- tmp EQL @; 
V <- @;3 
C.-s= C3 


Exceptions: 
none 
Opcodes (octal): 


G3 BIT Bit Test Word 
13 BITB Bit Test Byte 


Description: 


The source 1 operand is ANDed with the Source 2 _ operand. The only 
action is to set the condition codes. 
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ASH Arithmetic Shift 
Format: 
l 
5 9 8 6 5 4 
+—----------~-~--- +—----— +—----------- + 
| Opcode | reg | src.rw | 
$-—------------ $o----- $—---------- + 


Operation: 
Rn <- Rn shifted src<5:8> bits; 
Condition Codes: 


N <- Rn LSS @Q; 

Z <- Rn EQL @; 

V <- if src<5:0> EQL @ then @ else {integer overflow}; 

C <- if src<5:0> EQL @ then @ else {last bit shifted out}; 


Exceptions: 

none 
Opcodes (octal): 

G72 ASH Arithmetic Shift 
Description: 
The specified register is arithmetically shifted by the number of bits 
specified by the count operand (bits <5:8> of the Source operand) and 
the register is replaced by the result. The count ranges from -32 to 
+31. A negative count signifies a right shift. A positive count 
Signifies a left shift. A zero count implies no shift; but condition 
codes are affected. 


Notes: 


1. The sign bit of Rn is replicated in shifts to the right. The 
least significant bit is filled with zero in shifts to the 
left. The C bit stores the last bit shifted out. 


2. Integer overflow occurs on a left shift if any bit shifted into 
the sign position differs from the initial sign bit of the 
register. 


3. If the PC is used as the destination operand the result and the 
next instruction executed are UNPREDICTABLE. 
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ASHC Arithmetic Shift Combined 
Format: 
1 
5 9 8 6 5 g 
+—-—--—-----—----- +-----— +—----------- + 
| Opcode | reg | src.rw_ | 
+—-—--—-----~--~-~ +---—--— +—---—--—------ + 


Operation: 


tmp <- Rn'R{[n OR 1]; 

tmp <- tmp shifted src<5:@> bits; 
Rn <- tmp<31:16>; 

R{n OR 1] <- tmp<15:@>; 


Condition Codes: 


N <- tmp LSS @; 

Z <- tmp EQL QO; 

V <- if srce<5:8> EQL @ then @ else {integer overflow}; 

C <- if src<5:8> EQL @ then @ else {last bit shifted out}; 


Exceptions: 

none 
Opcodes (octal): 

G73 ASHC Arithmetic Shift Combined 
Description: 


The contents of the specified register, Rn, and the register R[{n OR 1] 
are treated as a Single 32-bit operand and are shifted by the number of 
bits specified by the count operand (bits <5:9> of the source operand) 
and the registers are replaced by the result. First, bits <31:16> of 
the result are stored in register Rn. Then, bits <15:@> of the result 
are stored in register R{n OR 1]. The count ranges from -32 to +3l. A 
negative count Signifies a right shift. A positive count signifies a 
left shift. A zero count implies no shift; but condition codes are 
affected. Condition codes are always set on the 32-bit result. 


Notes: 


1. The sign bit of Rn is replicated in shifts to the right. The 
least significant bit is filled with zero in shifts to the 
left. The C bit stores the last bit shifted out. 


2. Integer overflow occurs on a left shift if any bit shifted into 
the sign position differs from the initial sign bit of the 
32-bit operand. 
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3. TI£ the SP or PC is used as the destination operand, the result 
and the next instruction executed are UNPREDICTABLE. 
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16.2.4.3 Branch Instructions - 


BR BNE BPL BVC BCC BGE 
BEQ BMI BVS BCS BLT 


BGT 
BLE 


BHI 
BLOS 
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BHIS SOB 
BLO 
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BR Branch 
Format: 
1 
5 8 7 Q 
+—---—--—---------- +—-—-----——-—------- + 
| Opcode | displ.bb | 
+--------------- +--------------- + 


Operation: 
PC <- PC + SEXT(2*displ); 


Condition Codes: 


N <- N;3 
Z<~- Z3 
V <- V; 
C <- C; 


Exceptions: 

none 
Opcodes (octal): 

GBG4 BR Branch 
Description: 


Twice the sign-extended displacement is added to the PC and the PC is 
replaced by the result. 
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B Branch on (condition) 
Format: 
1 
5 8 7 Q 
+—-—---—----------—- +--—-—------------ + 
| Opcode | displ.bb | 
+--------—--—----—-4------------- + + 


Operation: 
lf condition then PC <- PC + SEXT(2*disp]); 


Condition Codes: 


N <- N; 
Z<- Z3 
V <- V; 
Cc <= ¢; 


Exceptions: 


none 
Opcodes (octal): Condition 

0014 BEQ Z EQL l Branch on Equal 
G81 BNE Z EQL @ Branch Not Equal 
1804 BMI N EQL 1 Branch on Minus 
1000 BPL N EQL @ Branch on Plus 
1034 BCS, C EQL 1 Branch on Carry Set, 

BLO Branch on Lower 
1830 BCC, C EQL @ Branch on Carry Clear, 

BHIS Branch on Higher or Same 
1024 BVS V EQL 1 Branch on Overflow Set 
1620 BVC V EQL @ Branch on Overflow Clear 
0024 BLT {N XOR V} EQL 1 Branch on Less Than 
020 BGE {N XOR V} EQL @ Branch on Greater Than or squal 
9034 BLE {Z OR {N XOR V}} 

EQL l Branch on Less Than or Equal 
0030 BGT {Z OR {N XOR V}} 
EQL @ Branch on Greater Than 

1810 BHI {C OR Z} EQL @ Branch on Higher 
1014 BLOS {C OR Z} EQL 1 Branch on Lower or Same 


Description: 


The condition codes are tested and if the condition indicated by the 
instruction is met, twice the sign-extended displacement is added to the 
PC and the PC is replaced by the result. 
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SOB Subtract One and Branch 
Format: 
1 
5 9 8 6 5 Q 
+—-—------------ +—-—-—-—-— +—--—-—--—---—--—-— + 
| Opcode | reg | displ.b6 | 
+—-—-—-———-—---—~-~—~ +—-—---—-— +—----------- + 


Operation: 


Rn <- Rn - 1]; 
if Rn NEQ @ then PC <- PC —- ZEXT(2¥*displ); 


Condition Codes: 


N <- N; 
Z<- Z3 
V <- V; 
C <=> 


Exceptions: 

none 
Opcodes (octal): 

977 SOB Subtract One and Branch 
Description: 
One is subtracted from the specified register and the register is 
replaced by the result. If the register is not equal to zero, twice the 
zero-extended displacement is subtracted from the PC and the PC is 


replaced by the result. 


Notes: 


1. If the PC is specified as the register, the results and_ the 
next instruction executed are UNPREDICTABLE. 


2. The 6-bit displacement operand is contained in bits <5:@> of 
the instruction. 
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16.2.4.4 Jump And Subroutine Instructions - 


JMP JSR 
RTS 
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JMP Jump 
Format: 
1 
5 6 5 g 
+------------------- $----------- + 
| Opcode | dst.aw | 
$—------------------- $—----------- + 


Operation: 
PC <- dst; 


Condition Codes: 


N <- N; 
Z<~ Z;3 
V <- V;3 
C <= C; 


Exceptions: 

compatibility mode illegal instruction 
Opcodes (octal): 

GOG1 JMP Jump 
Description: 
The PC is replaced by the destination operand. 
Note: 


A compatibility mode illegal instruction fault occurs if destination 
mode @ is used. 
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JSR Jump to Subroutine 
Format: 
1 
5 9 8 6 5 4) 
+—-—------------ +----- +----------- + 
| Opcode | reg | dst.aw | 
4+------------- +----- +—----------- + 


Operation: 


tmp <- dst; 


-(SP) <- Rn; !'value of Rn affected by dst specifier evaluation 
Rn <- PC; 
PC <- tmp; 


Condition Codes: 


N <- N; 
Z<-~ Z3 
V <- V3 
C <= C; 


Exceptions: 

compatibility mode illegal instruction 
Opcodes (octal): 

G04 JSR Jump to Subroutine 
Description: 


The source register is pushed on the stack and the source register is 
replaced by the PC. The PC is replaced by the destination operand. 


Notes: 


1. A compatibility mode illegal instruction fault occurs if 
destination mode @ is used. 


2. If the destination uses the same register as the source in the 
autoincrement or autodecrement addressing modes, the updated 
contents of the register are pushed on the stack. 
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RTS Return from Subroutine 
Formats: 
1 
5 3 2 Q 
+—-—-—--——-—-—--—-—-----—-—-- - ~~ +--—--— + 
| Opcode | reg | 
+—-—-—-—--—--—-—--—-—~—-—-—~---—~—-—-—-—~-~-~~ +----- + 


Operation: 


PC <- Rn; 
Rn <- (SP)+; 


Condition Codes: 


N <- N3 
Z<- Z? 
V <- V;3 
C <- C3 


Exceptions: 
none 
Opcodes (octal): 
GB028 RTS Return from subroutine 


Nescription: 
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The PC is replaced by the destination register. 


register is replaced by a word popped from the 


Stack. 


The 
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destination 
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19.2.4.5 Return From Interrupts And Traps - 


RTI RTT 
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RTI Return from Interrupt 
RTT Return from Trap 
Format: 
1 
> 4) 
+—------------------------------- + 
| Opcode | 
+—------~-------—------------------ + 
Operation: 
PC <- (SP)+; 
PSW<4:0> <- {(SP)+}<4:0>; 
Condition Codes: 
N <- saved PSW<3>; 
Z <- saved PSW<2>; 
V <- saved PSW<)1>; 
C <- saved PSW<O>; 
Exceptions: 
none 
Opcodes (octal): 
08082 RTI Return from Interrupt 
@80006 RTT Return from Trap 


Description: 


The PC is replaced by the first word popped from the stack. 
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The low 5 


bits of the PSW are replaced by the corresponding bits of the second 


word popped from the stack. 


Notes: 


1. In compatibility mode, the RTI and RTT instructions ignore’ the 
high 11 bits of the PSW popped from the stack. 


2. In compatibility mode, 
identical. 


the RTI and RTT instructions’ are 
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10.2.4.6 Miscellaneous - 
MTPI MTPD SCC 
MEPI MEF PD CCC 
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MTP Move To Previous Space 
Format: 
a 
5 6 5 4) 
$-------------~~-~-~--~ $----------- + 
| Opcode | dst.ww | 
$—-----------~-~----~-- $----------- + 


Operation: 

dst <- (SP)+; 
Condition Codes: 

N <- dst LSS @; 

Z <- dst EQL @; 

V <- @; 

C.’<=:C> 
Exceptions: 

none 


Opcodes (octal): 


0066 MTPI Move To Previous Instruction Space 
1966 MTPD Move To Previous Data Space 


Description: 

In compatibility mode, this PDP-1ll instruction works like a_ POP 
instruction. The destination operand is replaced by a word popped from 
the stack. 


Note: 


The implied source operand specifier is evaluated before the destination 
specifier. 
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MFP Move From Previous Space 
Format: 
1 
5 6 5 4) 
+------------------- $----------- + 
| Opcode | sre.rw | 
4+--------------—----- +—----------- + 


Operation: 
-(SP) <- src; 
Condition Codes: 


N <- sre LSS 
rc EQL 
; 
; 


=e 8 6™O 


Qa 


Z s 
V <- @ 
C C 
Exceptions: 
none 


Opcodes (octal): 


8065 MFPI Move From Previous Instruction Space 
1665 MF PD Move From Previous Data Space 


Description: 


In compatibility mode, this PDP-1ll instruction works like a PUSH 
instruction. The source operand is pushed onto the stack. 
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CC Condition Code Operators 
Format: 
i 
5 5 4 g 
+—----------—----—------- +--------- + 
| Opcode | mask | 
+-------—-------------- +--------- + 
Operation: 


lf mask<4> EQL 1 then PSW<3:0> <- PSW<3:8> OR mask<3:0> 
else PSW<3:0> <- PSW<3:0> AND {NOT mask<3: 98>}; 


Condition Codes: 


lf mask<4> EQL 1 then 
begin 
N <- N OR mask<3>; 


Z <- Z OR mask<2>; 
V <- V OR mask<l>; 
C <- C OR mask<@>; 
end 

else 
begin 
N <- N AND {NOT mask<3>}; 
Z <- Z AND {NOT mask<2>}; 
V <- V AND {NOT mask<l>}; 
C <= C AND {NOT mask<@>}; 
end 

Exceptions: 
none 
Opcodes (octal): 

GBG24O No operation 

@88@241 CLC Clear C 

08242 CLV Clear V 

88G@244 CLZ Clear Z 

988258 CLN Clear N 

800257 CCC Clear all Condition Codes 

908261 SEC Set C 

@ZG262 SEV Set V 

@QA264 SEZ Set Z 

60270 SEN Set N 

868277 SCC Set all Condition Codes 


Combinations of the above set or clear operations may be 
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ORed together to form combined instructions. 
Description: 


If the mask<4> bit is set, the PSW condition code bits are ORed with 
mask<3:8> and the condition codes are replaced by the result. If the 
mask<4> bit is clear, the PSW condition code bits are ANDed with the l's 
complement of mask<3:0> and the condition codes are replaced by the 
result. 
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10.3 ENTERING AND LEAVING COMPATIBILITY MODE 


Compatibility mode is entered by executing an REI instruction with the 
compatibility mode bit set in the image of the PSL on the stack. Other 
bits in the PSL have the following effects: 


Bits Effect 

NZVC Condition Codes 

T 1 Bie 

DV Reserved operand fault if not zero 
FU Reserved operand fault if not zero 
IV Reserved operand fault if not zero 
IPL Reserved operand fault if not zero 
PRV MOD Reserved operand fault if not 3 
CUR MOD Reserved operand fault if not 3 

Is Reserved operand fault if not zero 
FPD Reserved operand fault if not zero 
TP T pending bit. See Section on T bit 


operation in compatibility mode for a 
complete description of how trace faults 
work in compatibility mode. 


VAX native mode is’ re-entered from compatibility mode by the 
compatibility mode program causing an exception, or by an interrupt. 
The PSL pushed on the kernel or interrupt stack when leaving 
compatibility mode has all the bits that cause reserved operand faults 
in the above table set to the appropriate state. 


Note that when an RTI or RTT instruction is executed in compatibility 
mode, the 1l high bits of the PSW are ignored, but when the PSW is 
restored as part of the PSL when going from VAX native mode to 
compatibility mode, those bits must be zero, or a reserved operand fault 
occurs. 


19.3.1 General Register Usage 


Compatibility mode registers RO through R46 are bits 15 through 6 of VAX 
general registers RO through R6, respectively. Compatibility mode 
register R7 (PC) is bits 15 through @ of VAX general register R15 (PC). 
VAX registers R8 through R14 (SP) are not affected by compatibility 
mode. When entering compatibility mode, VAX register R7 and the upper 
halves of registers R@ through R6 and R15 are ignored. When an 
exception or interrupt occurs from compatibility mode, VAX register R7 
is UNPREDICTABLE and the upper halves of RO through R6 are either 
Cleared or left unchanged. and the upper half of the stacked R15 (PC) 
is zero. Since there are no FPll floating point instructions in 
compatibility mode, there are no floating accumulators. 
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10.4 COMPATIBILITY MODE MEMORY MANAGEMENT 


PDP-11 addresses are 16-bit byte addresses, hence compatibility mode 
programs are confined to execute in the first 654k bytes of the per 
process part of the virtual address’ space. There iS a one-to-one 
correspondence between a compatibility mode virtual address and its VAX 
counterpart (e.g., virtual address 9 references the same location in 
both modes). A compatibility mode address is interpreted as follows: 


PDP-11l segments can consist of 1 to 128 blocks of 64 bytes. VAX pages 
are 512 bytes long. The PDP-11 capability of providing different access 
protection to different segments is provided in 8 block chunks’ since 
protection is specified at the page level in the VAX architecture. 


The memory management syStem protects and relocates compatibility mode 
addresses in the normal native mode manner. Thus, all of the memory 
management mechanisms available in VAX mode are available to the 
compatibility mode executive for managing both the virtual and physical 
memory of compatibility mode programs. All of the exception conditions 
that can be caused by memory management in VAX mode can also occur when 
relocating a compatibility mode address. See Chapter 5. 


Most of the KT-11 features that affect the user environment can _ be 
Simulated with the VAX memory management system. Table 10-4 briefly 
describes the simulation method. Refer to Chapter 5 of this manual, and 
the appropriate PDP-11 documents for details of each system. 
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Table 1@-4 


KT11-D VAX 
feature to be simulated simulation method 


8 segments 8 segments can be Simulated by dividing 

per user. the 128 pages of the compatibility mode 
virtual address spac: into 8 logical groups 
of 16 pages each having possibly different 
protection. 


Segment size from 54 Segment size from 512 to 8K bytes 

to 8K bytes (1 to (1 to 16 pages) in 512 byte (1 page) 
128 blocks) in 54 byte increments, using discontiguous memory. 
increments, uSing 

contiguous memory. 


Forward growing Can be simulated using page table entries 
segments Specifying no access for those pages that 
(Expand Direction=9). are not allocated. 
Backward growing Can be simulated using page table entries 
segments specifying no access for those pages that 
(ED=1). are not allocated. 


Segments begin on any Segments begin on any 512 byte boundary. 
64 byte boundary. 
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The following example shows how a PDP-11 environment can be simulated 
uSing VAX memory management. Segments 9, 1, and 2 of the PDP-1l 


environment are program segments; 3 is unused; 4 and 5 are stack; and 
6 and 7 are read-write data. 


11 Environment VAX Page Table 

Seg # Size Expand Access Page Access 
(bytes)Direction 

g 8K Up Read only 8-15 Read only 
] 8K Up Read only 16-31 Read only 
2 255 Up Read only 32 Read only 
3 My “= None 33-77 No Access 
4 1K Down Read-Write 78-79 Read-Write 
5 SK Down Read-Write 848-95 Read-Write 
6 SK Up Read-Write 95-111 Read-Write 
7 2K Up Read-write 112-115 Read-Write 


116-127 No Access 
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10.5 COMPATIBILITY MODE EXCEPTIONS AND INTERRUPTS 


All interrupts and exception conditions that occur while the machine is 
in compatibility mode cause the machine to enter VAX mode, and are 
serviced as indicated in Chapter 6 (note that this includes backing up 
instruction side effects if necessary). The exception conditions 
discussed in this section are specific to compatibility mode. All these 
exceptions create a 3-longword frame on the kernel stack containing PSL, 
PC, and one longword of exception specific information. Bits 15 through 
4% of this longword contain a code indicating the specific type of 
exception and bits 31 through 16 are zero. There are no compatibility 
mode exception conditions that result in traps (see Chapter 6 for 
Gefinition of trap, fault, and abort). 


10.5.1 Reserved Instruction Fault 
A reserved instruction fault occurs for opcodes that are defined as 


reserved in compatibility mode (See section on Instructions). The code 
for the reserved instruction fault is 9. 


16.5.2 BPT Instruction Fault 


The code for the BPT insStruction fault is l. 


16.5.3 I0OT Instruction Fault 


The code for the IOT inStruction fault is 2. 


10.5.4 EMT Instruction Fault 


The fault code for the group of EMT instructions is 3. 


10.5.5 TRAP Instruction Fault 


The fault code for the group of TRAP insStructions is 4. 


18.5.6 Illegal Instruction Fault 


In compatibility mode,JMP and JSR instructions with a register 
destination are illegal. The fault code for illegal instructions is 5. 
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10.5.7 Odd Address Error Abort 


An odd address error abort is caused in compatibility mode whenever a 
word reference iS attempted on a byte boundary. The code for odd 
address errors is 6. 


10.6 T BIT OPERATION IN COMPATIBILITY MODE 


In compatibility mode, a trace fault occurs at the beginning of an 
instruction when the T bit is set in the PSW at the beginning of the 
prior instruction. This effect is achieved by using the TP bit in the 
PSL (see Chapter 6). On trace faults, a 2-longword kernel stack frame 
is created, containing PSL and PC. IPL and IS are zero and CM is one in 
the stacked PSL. Compatibility mode trace fault uses the Same vector as 
VAX mode trace fault. See Chapter 6. The rules for trace fault 
generation in compatibility mode are identical to those for native mode. 
However, an odd address abort for an inStruction fetch may precede the 
trace fault for that instruction. 


There are two ways to get the T bit set at the beginning of a 
compatibility mode instruction: 


1. An RTT/RTI instruction is executed in compatibility mode with 
the T bit is set in the PSW image on the stack. In this case, 
the next instruction is executed (the one pointed to by the PC 
on the stack), and a trace fault is taken before the following 
instruction. 


2. An REI instruction is executed in VAX mode which has both the T 
bit and CM bit set (and TP clear) in the saved PSL image on the 
Stack. Again, one instruction is executed, and the trace fault 
is taken. (For a complete description of the interaction of 
REL, T bit, and TP bit, see Chapter 6. The operations’ that 
occur aS a function of these conditions are the same whether or 
not compatibility mode is being entered from the REL.) 
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The T bit interacts with other compatibility mode operations as follows 
(for interaction with other than compatibility mode specific operations, 
see Chapter 6): 


i tae 


3. 


T bit set (but TP is clear) at the beginning of any 
compatibility mode instruction which does not cause a 
compatibility mode fault. 


In this case, the instruction sets TP and executes. A trace 
fault is taken before the next instruction. The saved PSL has 
the T bit set and TP clear. The compatibility mode executive 
can take one of the following courses of action: 


1. If it services the exception directly, it can clear the T 
bit in the saved PSL on the kernel stack if it no longer 
wants to trace the program, or it can leave it set if it 
wants to continue tracing the program. It exits with an 
REI. 


2. If it returns the trace exception to compatibility mode, it 
pushes a (16-bit) PC and (16-bit) PSW with the T bit set on 
the compatibility mode User stack to simulate the effect of 
the PDP-ll trace trap. It then clears the T bit in the 
saved PSL image on the kernel stack, changes the saved PC 
to point to the compatibility mode service routine, and 
does an REI. The compatibility mode service routine can 
then clear the T bit in the PSW image on its stack if it 
does not want to continue tracing. The compatibility mode 
routine returns with RTT or RTI. 


T bit set (but TP is clear) at the beginning of an RTI or RTT. 


The RTT/RTI instruction executes and TP is set. A trace fault 
occurs before the next instruction is executed. There are two 
different cases, depending on whether or not the T bit was” set 
in the image of the PSW which was popped from the stack by the 
RTT/RTI instruction: 


1. T bit not set. 


Neither TP nor T will be set in the saved PSL on the kernel 
Stack. 


2. T bit set. 
TP will not be set, and T will be set, as is the case as 


for other compatibility mode instructions. 


T bit set (but TP is clear) at the beginning of any instruction 
which causes a compatibility mode fault. 
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10.7 


Several 
mode: 


iL 


The fault condition is serviced first. TP is clear and T is 
set in the saved PSL pushed on the kernel stack. 


UNIMPLEMENTED PDP-11 TRAPS 


traps that occur in PDP-lls are not implemented in compatibility 


There iS no stack overflow trap. This is equivalent to the 
User Mode of the KT1ll, where there is also no overflow 
protection. Stack overflow can be provided by the 


compatibility mode executive using the memory management 
mechanisms. 


There is no concept of a double error trap in compatibility 
mode, Since the first error always puts the machine in VAX 
mode. 


All other exception conditions such as power failure, memory 


parity, and memory management exceptions cause the machine to 
enter VAX mode. 
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10.8 COMPATIBILITY MODE I/O REFERENCES 


Neither instruction stream references nor data reads nor writes can be 
to I/0 space. The results are UNPREDICTABLE if I/O space is referenced 
from compatibility mode. 


10.9 PROCESSOR REGISTERS 


The only processor register available in compatibility mode is part of 
the PSW, and it maybe explicitly referenced only with the condition code 
instructions, RTI, and RTT. Access to all other registers must be done 
in VAX mode. 


10.10 PROGRAM SYNCHRONIZATION 


All PDP-lls guarantee that read-modify-write operations to I/0 device 
registers are interlocked; that is, the device can determine at the 
time of the read that the same register will be written as the next bus 
cycle. This synchronization also works in memory on most PDP-lls. In 
compatibility mode, instructions that have modify destinations will 
perform this synchronization for UNIBUS I/0 device registers and never 
for memory. 


BLANK 
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A.1 INSTRUCTION OPERAND FORMATS 


The format of the instructions is given using the qualified name 
convention described in the next section. For the mnemonics {} encloses 
a list of data types of which one must be selected. Instructions which 
have two forms differing in the number of operands have the number of 
operands appended to the opcode as ae digit. For the operands, {} 
encloses all implied operands. Refer to the VAX-11 Macro Reference 
Manual for a description of when the data type suffix and operand number 
suffix may be omitted. 


Instructions 

1. Move 9 
MOV{B,W,L,F,D,G,H,Q,0O} src.rx, dst.wx 

2. Push Long 1 
PUSHL src.rl, {-(SP).wl} 

3. Clear 5 
CLR{B,W,L=F,Q=D=G,O=H} dst.wx 

4. Move Negated 7 
MNEG{B,W,L,F,D,G,H} srce.rx, dst.wx 

5. Move Complemented 3 
MCOM{B,W,L} src.rx, dst.wx 

6. Move Zero-Extended 3 
MOVZ {BW,BL,WL} src.rx, dst.wy 

7. Convert 4B 


CvT{B,W,L,F,D,G,H}{B,W,L,F,D,G,H} src.rx, dst.wy 
All pairs except BB,WW,LL,FF,DD,GG,HH,DG, and GD 
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8. 


9. 


10. 


Lids 


12. 


13.6 


14. 


15. 


16. 


17. 


18. 


19. 


20. 


21. 


22. 


23% 


24. 


22% 


Convert Rounded 
CVTR{F,D,G,H}L sre.rx, dst.wl 


Compare 
CMP {B,W,L,F,D,G,H} srcel.rx, srce2.rx 


Test 
TST{B,W,L,F,D,G,H} src.rx 


Add 2 Operand 
ADD{B,W,L,F,D,G,H}2 add.rx, sSum.mx 


Add 3 Operand 
ADD{B,W,L,F,D,G,H}3 addl.rx, add2.rx, sum.wx 


Increment 
INC{B,W,L} sum.mx 


Add With Carry 
ADWC add.rl, sum.ml 


Add Aligned Word 
ADAWI add.rw, sum.mw 


Subtract 2 Operand 
SUB{B,W,L,F,D,G,H}2 sub.rx, dif.mx 


Subtract 3 Operand 
SUB{B,W,L,F,D,G,H}3 sub.rx, min.rx, dif.wx 


Decrement 
DEC{B,W,L} dif.mx 


Subtract With Carry 
SBWC sub.rl, dif.ml 


Multiply 2 Operand 
MUL{B,W,L,F,D,G,H}2 mulr.rx, prod.mx 


Multiply 3 Operand 
MUL{B,W,L,F,D,G,H}3 mulr.rx, muld.rx, prod.wx 


Extended Multiply 
EMUL mulr.rl, muld.rl, add.rl, prod.wq 


Divide 2 Operand 
DIV{B,W,L,F,D,G,H}2 divr.rx, quo.mx 


Divide 3 Operand 
DIV{B,W,L,F,D,G,H}3 divr.rx, divd.rx, quo.wx 


Extended Divide 
EDIV divr.rl, divd.rq, quo.wl, rem.wl 
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26. Arithmetic Shift 2 
ASH{L,Q} cnt.rb, src.rx, dst.wx 

27. Bit Test 3 
BIT{B,W,L} mask.rx, src.rx 

28. Bit Set 2 Operand 3 
BIS{B,W,L}2 mask.rx, dst.mx 

29. Bit Set 3 Operand 3 
BIS{B,W,L}3 mask.rx, Src.rx, dst.wx 

38. Bit Clear 2 Operand 3 
BIC{B,W,L}2 mask.rx, dst.mx 

31. Bit Clear 3 Operand 3 
BIC{B,W,L}3 mask.rx, sSrc.rx, dst.wx 

32. Exclusive OR 2 Operand 3 
XOR{B,W,L}2 mask.rx, dst.mx 

33. Exclusive OR 3 Operand 3 
XOR{B,W,L}3 mask.rx, src.rx, dst.wx 

34. Rotate Long 1 
ROTL cnt.rb, src.rl, dst.wl 

35. Extended Modulus 4 
EMOD{F,D} mulr.rx, mulrx.rb, muld.rx, int.wl, fract.wx 
EMOD{G,H} mulr.rx, mulrx.rw, muld.rx, int.wl, fract.wx 

36. Polynomial Evaluation F_ floating 1 
POLYF arg.rf, degree.rw, tbladdr.ab, {R#9-3.wl} 

37. Polynomial Evaluation D_ floating 1 
POLYD arg.rd, degree.rw, tbladdr.ab, {R9-5.wl} 

38. Polynomial Evaluation G_ floating 1 
POLYG arg.rg, degree.rw, tbladdr.ab, {R@-5.wl} 

39. Polynomial Evaluation H_ floating 1 
POLYH arg.rh, degree.rw, tbladdr.ab, 
{R®@-5.wl,-16 (SP) :-1(SP) .wb} 

49. Move Address 5 
MOVA{B,W,L=F,Q=D=G,0O=H} src.ax, dst.wl 

41. Push Address 5 
PUSHA{B,W,L=F,Q=D=G,0O=H} src.ax, {-(SP).wl} 

42. Index I 


INDEX subscript.rl, low.rl, high.rl, size.rl, 
indexout.wl 


indexin.rl, 
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43. Extract Field 1 
EXTV pos.rl, size.rb, base.vb, {field.rv}, dst.wl 
44. Extract Zero-Extended Field 1 
EXTZV pos.rl, size.rb, base.vb, {field.rv}, dst.wl 
45. Insert Field 1 
INSV srce.rl, pos.rl, size.rb, base.vb, {field.wv} 
46. Compare Field 1 
CMPV pos.rl, size.rb, base.vb, {field.rv}, srce.rl 
47. Compare Zero-Extended Field 1 
CMPZV pos.rl, size.rb, base.vb, {field.rv}, sre.rl 
48. Find First 2 
FF{S,C} startpos.rl, size.rb, base.vb, {field.rv}, findpos.wl 
49. Conditional Branch 12 
B{condition} displ.bb 
Condition Name 
LSS Less Than 
LEQ Less Than or Equal 
EQL, EQLU Equal, Equal Unsigned 
NEQ, NEQU Not Equal, Not Equal Unsigned 
GEQ Greater Than or Equal 
GTR Greater Than 
LSSU, CS Less Than Unsigned, Carry Set 
LEQU Less Than or Equal Unsigned 
GEQU, CC Greater Than or Equal Unsigned, 
Carry Clear 
GTRU Greater Than Unsigned 
Vs Overflow Set 
vc Overflow Clear 
58. Branch With {Byte, Word} Displacement 2 
BR{B,W} displ.bx 
51. Jump 1 
JMP dst.ab 
52. Branch on Bit 2 
BB{S,C} pos.rl, base.vb, displ.bb, {field.rv} 
53. Branch on Bit (and modify without interlock) 4 
BB{S,C}{S,C} pos.rl, base.vb, displ.bb, {field.mv} 
54. Branch on Bit (and modify) Interlocked 2 


BB{SS,CC}I pos.rl, base.vb, displ.bb, {field.mv} 
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55. Branch on Low Bit 2 
BLB{S,C} srce.rl, displ.bb 


56. Add Compare and Branch 7 
ACB{B,W,L,F,D,G,H} limit.rx, add.rx, index.mx, displ.bw 
Compare is LE on positive add, GE on negative 
add. 


57. Add One and Branch Less Than or Equal 1 
AOBLEQ limit.rl, index.ml, displ.bb 


58. Add One and Branch Less Than l 
AOBLSS limit.rl, index.ml, displ.bb 


59. Subtract One and Branch Greater Than or Equal 1 
SOBGEQ index.ml, displ.bb 


60. Subtract One and Branch Greater Than 1 
SOBGTR index.ml, displ.bb 


61. Case 3 
CASE{B,W,L} selector.rx, base.rx, limit.rx, displ.bw-list 


62. Branch to Subroutine With {Byte, Word} Displacement 2 
BSB{B,W} displ.bx, {-(SP).wl} 


63. Jump to Subroutine 1 
JSB dst.ab, {-(SP).wl} 


64, Return from Subroutine 1 
RSB {(SP)+.r1} 


65. Call Procedure with General Argument List 1 
CALLG arglist.ab, dst.ab, {-(SP) .w*} 


66. Call Procedure with Stack Argument List 1 
CALLS numarg.rl, dst.ab, {-(SP) .w*} 


67. Return from Procedure 1 
RET {(SP)+.r*} 


68. Breakpoint Fault 1 
BPT {-(KSP) .w*} 


69. Halt 1 
HALT {-(KSP) .w*} 
Halts in Kernel mode, faults otherwise. 
Assigned opcode @. 


78. Push Registers 1 
PUSHR mask.rw, {-(SP) .w*} 
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Dig 


72. 


ABs 


74. 


75. 


76. 


ya 


78. 


19. 


80. 


81. 


82. 


83. 


84, 


85. 


86. 


87. 


Pop Registers 
POPR mask.rw, {(SP)+.r*} 


Move from PSL 
MOVPSL dst.wl 


Bit Set PSW 
BISPSW mask.rw 


Bit Clear PSW 
BICPSW mask.rw 


No Operation 
NOP 


Extended Function Call 
XFC {unspecified operands} 


Insert Entry in Queue 
INSQUE entry.ab, pred.ab 


Insert Entry into Queue at Head, Interlocked 
INSQHI entry.ab, header.aq 


Insert Entry into Queue at Tail, Interlocked 
INSQTI entry.ab, header.aq 


Remove Entry from Queue 
REMQUE entry.ab, addr.wl 


Remove Entry from Queue at Head, Interlocked 
REMQHI header.aq, addr.wl 


Remove Entry from Queue at Tail, Interlocked 
REMQTI header.aq, addr.wl 


Move Character 3 Operand 
MOVC3 len.rw, srcaddr.ab, dstaddr.ab, {R9-5.wl} 


Move Character 5 operand 
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1 


MOVC5 srclen.rw, srcaddr.ab, fill.rb, dstlen.rw, dstaddr.ab, 


{R8-5.wl} 


Move Translated Characters 


1 


MOVTC srclen.rw, srcaddr.ab, fill.rb, tbladdr.ab, dstlen.rw, 


dstaddr.ab, {R9-5.wl} 


Move Translated Until Character 


1 


MOVTUC srclen.rw, srcaddr.ab, esc.rb, tbladdr.ab, dstlen,rw, 


dstaddr.ab, {R9-5.wl} 


Compare Characters 3 Operand 


CMPC3 len.rw, srcladdr.ab, src2addr.ab, {R9-3.wl} 
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88. Compare Characters 5 Operand 1 
CMPC5 srcllen.rw, srcladdr.ab, fill.rb, src2len.rw, 
src2addr.ab, {R@-3.wl} 


89, Scan Characters 1 
SCANC len.rw, addr.ab, tbladdr.ab, mask.rb, {R9-3.wl} 


98. Span Characters M 
SPANC len.rw, addr.ab, tbladdr.ab, mask.rb, {R#-3.wl1} 

91. Locate Character 1 
LOCC char.rb, len.rw, addr.ab, {R®9-l.wl} 

92. Skip Character 1 
SKPC char.rb, len.rw, addr.ab, {R@-l.wl} 

93. Match Characters 1 
MATCHC lenl.rw, addrl.ab, len2.rw, addr2.ab, {R9-3.wl} 

94. Cyclic Redundancy Check 1 
CRC tbl.ab, inicrc.rl, strlen.rw, stream.ab, {R#-3.wl} 

95. Move Packed 1 
MOVP len.rw, srcaddr.ab, dstaddr.ab, {R@-3.wl} 

96. Compare Packed 3 Operand 1 
CMPP3 len.rw, srcladdr.ab, src2addr.ab, {R9-3.wl} 

97. Compare Packed 4 Operand 1 
CMPP4 srcllen.rw, srcladdr.ab, src2len.rw, Ssrc2addr.ab, 
{RG-3.wl} 

98. Add Packed 4 Operand 1 


ADDP4 addlen.rw, addaddr.ab, sumlen.rw, sumaddr.ab, {R9-3.wl} 


99. Add Packed 6 Operand 1 
ADDP6 addllen.rw, addladdr.ab, add2len.rw, add2addr.ab, 
sumlen.rw, sumaddr.ab, {R@-5.wl} 


168. Subtract Packed 4 Operand 1 
SUBP4 sublen.rw, subaddr.ab, diflen.rw, difaddr.ab, {R9-3.wl} 


181. Subtract Packed 6 Operand 1 
SUBP6 sublen.rw, Subaddr.ab, minlen.rw, minaddr.ab, 
diflen.rw, difaddr.ab, {R®-5.wl} 


192. Multiply Packed 1 
MULP mulrlen.rw, mulraddr.ab, muldlen.rw, muldaddr.ab, 
prodlen.rw, prodaddr.ab, {R9-5.wl} 


103. Divide Packed l 
DIVP divrlen.rw, divraddr.ab, divdlen.rw, divdaddr.ab, 
quolen.rw, quoaddr.ab, {R@-5.wl, -16(SP):-1(SP) .wb} 
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194, 


165. 


166. 


107. 


108. 


169. 


110. 


lll. 


112: 


113. 


114. 


L153 


116. 


Convert Long to Packed 


CVTLP src.rl, dstlen.rw, dstaddr.ab, 


Convert Packed to Long 


CVTPL srclen.rw, srcaddr.ab, {R9-3.wl}, dst.wl 


Convert Packed to Trailing 
Convert Trailing to Packed 
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CVT{PT,TP} srclen.rw, srcaddr.ab, tbladdr.ab, dstlen.rw, 


dstaddr.ab, {R9-3.wl} 


Convert Packed to Leading Separate 
Convert Leading Separate to Packed 


2 


CVT{PS,SP} srclen.rw, srcaddr.ab, dstlen.rw, dstaddr.ab, 


{R0-3.wl} 


Arithmetic Shift and Round Packed 


ASHP cnt.rb, srclen.rw, srcaddr.ab, 


dstaddr.ab, {R#9-3.wl} 


Edit Packed to Character String 


1 


round.rb, dstlen.rw, 


1 


EDITPC srclen.rw, srcaddr.ab, pattern.ab, dstaddr.ab, {R9-5.wl} 


Probe {Read, Write} Accessability 


PROBE{R,W} mode.rb, len.rw, base.ab 


Change Mode 

CHM{K,E,S,U} param.rw, {-(ySP) .w*} 
Tllegal on interrupt stack. 

Where y=MINU(x, PSL<current_mode>) 


Return from Exception or Interrupt 
REI {(SP)+.r*} 


Load Process Context 
LDPCTX {PCB.r*, -—(KSP) .w*} 
Legal only on interrupt stack. 


Save Process Context 
SVPCTX {(SP)+.r*, PCB.w*} 
Legal only in Kernel mode. 


Move To Process Register 
MTPR src.rl, procreg.rl 
Legal only in Kernél mode. 


Move From Processor Register 
MFPR procreg.rl, dst.wl 
Legal only in Kernel mode. 


2 


Total 384 
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A.2 OPERAND SPECIFIER NOTATION 


The standard VAX notation for operand specifiers is: 


<name>.<access type><data type> 


where: 


1. Name is 


a suggestive name for the operand in the 


context of the instruction. It is the capitalized 


name of 


a register or block for implied operands. 


2. Access type is a letter denoting the operand 
specifier access type. 


a7 


E<cng 


Calculate the effective address of the 
specified operand. Address is returned in a 
pointer which is the actual instruction operand. 
Context of address calculation is given 

by data type given by <data type>. 

No operand reference. Operand specifier is 
branch displacement. Size of branch 
displacement is given by <data type>. 

operand is modified (both read and written) 
operand is read only 

if not "Rn", same as a. If "Rn", R{nt1l]'R[n]. 
operand is written only 


3. Data type is a letter denoting the data type of the 


operand 


eX XE AQOoOrYHDHOQ MAS 
t 


byte 

D_ floating 

F floating 

G floating 

H_floating 

longword 

octaword 

quadword 

Field (used only on implied operands) 
word 

first data type specified by instruction 
second data type specified by instruction 


A-9 


multiple longwords (used only on implied operands) 


For names, the following names and abbreviations are used: 


l. add —- addend 


2. addr - address 


3. arglist - argument list 
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base - base 

char - character 

cnt - count 

dif - difference 

displ - displacement 
divd - dividend 

divr - divisor 

dst - destination 

entry - entry 

esc - escape 

fill - fill 

findpos - find position 
fract - fraction 

index - index 

inicre —- initial cre 
int - integer 

len - length 

limit - limit 

mask - mask 

min — minuend 

muld ~- multiplicand 
mulr —- multiplier 

mulrx - multiplier extension 
numarg —- number of arguments 
option - option 


param - parameter 
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39. pos - position 

31. pred - predecessor 

32. procreg - internal processor register 

33. prod - product 

34. quo - quotient 

35. rem - remainder 

36. selector - selector 

37. size - size 

38. src - source 

39. startpos - starting position 

49. stream - stream 

41. strlen - string length 

42. sub - subtrahend 

43. sum - sum 


44. tbl - table 
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A.3 OPCODE ASSIGNMENTS 


SINGLE BYTE OPCODES 

Binary Hex Mnemonic Binary Hex Mnemonic 
GZ080G000 88 HALT GG109000 208 ADDP4 
G6000001 61 NOP GG108001 21 ADDP6 
9808009819 82 REI @8199818 22 SUBP4 
G80800811 63 BPT $GZ100011 23 SUBP6 
G@000G100 84 RET 98100100 24 CVTPT 
990990181 985 RSB 981080181 25 MULP 
98000118 66 LDPCTX 98198118 26 CVTTP 
98800111 67 SVPCTX 981088111 27 DIVP 
98001090 88 CVTPS 8181080 28 MOVC3 
909001001 89 CVTSP 9818018001 29 CMPC3 
@0001018 @A INDEX 98101818 2A SCANC 
98881011 8B CRC @8101811 2B SPANC 
$8081198 @C PROBER 98191108 2C MOVCS5 
$9801101 6D PROBEW $8191101 2D CMPC5 
90081118 @®E INSQUE 96181110 2E MOVTC 
$8001111 6F REMQUE 98181111 2F MOVTUC 
98019000 16 BSBB 9Z1198000 38 BSBW 
98810001 11 #£4BRB 98118001 31 BRW 
98010019 12 BNEQ,BNEQU 9811080180 32 CVTWL 
98819811 13 BEQL,BEQLU 98119011 33 CVTWB 
98010109 14 BGTR 98119108 34 MOVP 
99810181 15 BLEQ $81180181 35 CMPP3 
98018119 16 JSB 96118119 36 CVTPL 
98616111 17 JMP @8118111 37 CMPP4 
8011080 18 BGEQ 8111986 38 EDITPC 
088110981 19 BLSS 99111901 39 MATCHC 
$860911018 1A BGTRU 98111818 3A LOCC 
$6811911 1B BLEQU 98111611 3B SKPC 
98011188 1C BVC 981111886 3C MOVZWL 
988111601 1D BVS $9111181 3D ACBW 
$8011118 1E BGEQU,BCC 981111180 3E MOVAW 
@8811111 1F BLSSU,BCS $9111111 3F PUSHAW 
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Binary Hex Mnemonic Binary Hex Mnemonic 
919000800 48 ADDF2 91190008 68 ADDD2 
®1900001 41 ADDF3 91199001 61 ADDD3 
G18900018 42 SUBF2 91199918 62 SUBD2 
91900811 43 SUBF3 91169811 63 SUBD3 
@19001800 44 MULF2 91100198 64 MULD2 
91900181 45 MULF3 ®1180181 65 MULD3 
918980118 46 DIVF2 91100119 66 DIVD2 
91000111 47 DIVF3 91198111 67 DIVD3 
91801999 48 CVTFB 1101800 68 CVTDB 
91981001 49 CVTFEW 1181001 69 CVTDW 
9109010180 4A CVTFL 911919018 6A CVTDL 
01981611 4B CVTRFL 91161911 6B CVTRDL 
$18011998 4C CVTBF 91191100 6C CVTBD 
919011801 4D CVTWF 91191101 6D CVTWD 
91801119 4E CVTLF 91191118 6E CVTLD 
91981111 4F ACBF 91161111 6F ACBD 
91819900 58 MOVF 91119800 78 MOVD 
91910001 51 CMPF 91110081 71 CMPD 
91619010 52 MNEGF 1119810 72 MNEGD 
919109011 53 TSTF 91116011 73 TSTD 
@189191986 54 EMODF 911181800 74 EMODD 
61918161 55 POLYF 911180181 75 POLYD 
91819118 56 CVTFD 91118118 76 CVTDF 
91916111 57 RESERVED to DEC 91118111 77 RESERVED to DEC 
91911060 58 ADAWI 91111909 78 ASHL 
1911981 59 RESERVED to DEC 91111901 79 ASHQ 
91811918 5A RESERVED to DEC $1111819 7A EMUL 
91911011 5B RESERVED to DEC 91111011 7B EDIV 
1811100 5C INSQHI 811111908 7C CLRQ,CLRD,CLRG 
91911181 5D INSQTI 911111861 7D MOVQ 
@1811118 5E REMQHI 91111110 7E MOVAQ,MOVAD ,MOVAG 


19011111 oF REMQTI G®llili1l 7F 


PUSHAQ, PUSHAD, PUSHAG 
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OPCODE ASSIGNMENTS 


Binary Hex Mnemonic Binary Hex Mnemonic 


189880808 88 ADDB2 101988006 A® ADDW2 
19898001 81 ADDB3 19180081 Al ADDW3 
188080019 82 SUBB2 181980019 A2 SUBW2 
19800011 83 SUBB3 19189811 A3 SUBW3 
160860100 84 MULB2 18188190 A4 MULW2 
1609001091 85 MULB3 19198191 A5 MULW3 
186808118 86 DIVB2 18198118 A6 DIVW2 
19600111 87 DIVB3 191898111 A7 DIVW3 
19801908 88 BISB2 191918008 A8 BISW2 
19801981 89 BISB3 1919180801 A9 BISW3 
18891618 8A BICB2 186181818 AA BICW2 
19801811 8B BICB3 19101011 AB BICW3 
19891198 8C XORB2 16181168 AC XORW2 
19681101 8D XORB3 196181181 AD XORW3 
180911180 8E MNEGB 19191118 AE MNEGW 
19061111 8F CASEB 19181111 AF CASEW 
1880188008 98 MOVB 181198808 BS MOVW 
19016001 91 CMPB 1811898001 Bl CMPW 
18818018 92 MCOMB 181188018 B2 MCOMW 
16919811 93 BITB 18118011 B3 BITW 
19918186 94 CLRB 19118108 B4 CLRW 
18918181 95 TSTB 19118101 BS TSTW 
19918118 96 INCB 19118119 B6 INCW 
19818111 97 DECB 16118111 B7 DECW 
19811880 98 CVTBL 161118908 B8 BISPSW 
160119801 99 CVTBW 19111801 B9 BICPSW 
16811818 9A MOVZBL 191110918 BA POPR 
18811911 9B MOVZBW 19111811 BB PUSHR 
1868111080 9C ROTL 186111198 BC CHMK 
189111801 9D ACBB 19111181 BD CHME 
180811118 9E MOVAB 186111118 BE CHMS 
19911111 9F PUSHAB 16111111 BEF CHMU 
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OPCODE ASSIGNMENTS 


Binary Hex Mnemonic Binary Hex Mnemonic 


11890008 C8 ADDL2 111809006 E@ BBS 
118688881 Cl ADDL3 11190001 El BBC 
11600018 C2 SUBL2 11160018 E2 BBSS 
11866811 C3 SUBL3 11180811 E3 4BBCS 
11600188 C4 MULL2 11180196 E4 BBSC 
11968181 C5 MULL3 111898181 E5 BBCC 
11898118 C6 DIVL2 11190110 E6 BBSSI 
11800111 C7 DIVL3 11168111 E7 # =BBCCI 
118861988 C8 BISL2 11191808 E8 BLBS 
11981801 C9 BISL3 11191801 E9 BLBC 
11801818 CA BICL2 11191910 EA FFS 
11981811 CB  BICL3 11191911 EB FFC 
11981188 CC XORL2 11101160 EC CMPV 
11981181 CD XORL3 111861191 ED CMPZV 
11861118 CE MNEGL 11191118 EE EXTV 
11661111 CF CASEL 11101111 EF EXTZV 
119190899 DS MOVL 111186090 FO INSV 
11919001 Dl CMPL 111190601 Fl ACBL 
11819818 D2 MCOML 11119018 F2 AOBLSS 
11919811 D3 BITL 11118011 F3 AOBLEQ 
11918108 D4 CLRL,CLRF 11119186 F4 SOBGEQ 
11610101 D5 MTSTL 11116191 F5 SOBGTR 
118180118 D6 INCL 111180119 F6 CVTLB 
11918111 D7 DECL 11118111 F7 CVTLW 
11811988 D8 ADWC 111118900 F8 ASHP 
119119801 D9 SBWC 11111001 F9 CVTLP 
11811016 DA MTPR 111119180 FA CALLG 
11811611 DB MFPR 11111811 FB CALLS 


11111190 FC XFC 

11111181 FD ESCD to DEC 
11111119 FE ESCE to DEC 
ll1l11111 FF ESCF to DEC 


11011198 DC MOVPSL 
11911181 DD PUSHL 
11611118 DE MOVAL,MOVAF 
11911111 DF PUSHAL, PUSHAF 
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TWO BYTE OPCODES 


Hex Mnemonic Hex Mnemonic 
@SFD 

to 

31FD RESERVED to DIGITAL 

32FD CVTDH 33FD CVTGF 
34FD 

to 

3FFD RESERVED to DEC 

AGFD ADDG2 6GFD ADDH2 
41FD ADDG 3 61FD ADDH 3 
42FD SUBG2 62FD SUBH2 
43FD SUBG3 63FD SUBH3 
44FD MULG 2 64FD MULH2 
45FD MULG3 65FD MULH3 
46FD DIVG2 66FD DIVH2 
47FD DIVG3 67FD DIVH3 
48FD CVTGB 68FD CVTHB 
49FD CVTGW 69FD CVTHW 
4AFD CVTGL 6AFD CVTHL 
4BFD CVTRGL 6BFD CVTRHL 
4CFD CVTBG 6CFD CVTBH 
4DFD CVTWG 6DFD CVTWH 
4EFD CVTLG 6EFD CVTLH 
4AFFD ACBG 6FFD ACBH 
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50FD MOVG 7OFD MOVH 
51FD CMPG 71FD CMPH 
52FD MNEGG 72FD MNEGH 
53FD TSTG 73FD TSTH 
54FD EMODG 74FD EMODH 
55FD POLYG 75FD POLYH 
56FD CVTGH 76FD CVTHG 
57FD RESERVED to DEC 77EFD RESERVED to DEC 
58FD RESERVED to DEC 78FD RESERVED to DEC 
59FD RESERVED to DEC 79OFD RESERVED to DEC 
5AFD RESERVED to DEC TAFD RESERVED to DEC 
5BFD RESERVED to DEC 7BFD RESERVED to DEC 
5CFD RESERVED to DEC 7TCFD CLRH , CLRO 
5DFD RESERVED to DEC 7DFD MOVO 
5EFD RESERVED to DEC 7JEFD MOVAH ,MOVAO 
5FFD RESERVED to DEC TFFD PUSHAH, PUSHAO 
8OFD 
to 
O97FD RESERVED to DIGITAL 
O98FD CVTFH 99FD CVTFG 
SAFD 
to 
F5SFD RESERVED to DIGITAL 
F6FD CVTHF F7FD CVTHD 
F8FD 
to 
FCFF RESERVED to DIGITAL 
FDFF BUGL (used by VMS for BUGCHECK) FEFF BUGW 


FFFF 


RESERVED for all time 
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A.4 INSTRUCTIONS USABLE TO REFERENCE I/O SPACE 


Some of the instructions are not usable to reference I/O space. The 
reasons for this are: 


1. String instructions are restartable via PSL<FPD> 
2. The instruction is not in the kernel set 
3. The PC, SP, or PCBB can not point to I/O space 


4. 1/0 space does not Support operand types of quad, floating, 
field, or queue; nor can the position, size, length, or base 
of them be from I/O space 


5. The instruction may be interruptible because it is potentially 
a slow instruction in some implementations 


6. Only instructions with a maximum of one modify or write 
destination can be used. The destination must be the last 


operand 


For any memory reference to I/0 space, the programmer must use an 
instruction from the following lists and must ensure that no interrupts 
or faults will occur, including page faults, after the first I/0 space 
reference. To ensure no interrupts, the programmer must avoid operand 
specifier modes 9, 11, 13, and 15, and these modes indexed. 
(Symbolically, these are @(Rn)+, @B°D(Rn), @W°D(Rn), and @L°D(Rn), and 
these indexed.) The hardware may allow interrupts for these modes’ in 
order to minimize interrupt latency. For the instructions in the 
following lists, the hardware ensures that no other interrupts. will 
occur after the first I/O space access. 


Since these instructions are not interruptable after I/O space accesses 
(except for the addressing modes above), their execution will extend the 
interrupt latency. The programmer should make some effort to keep them 
Short by minimizing the number of memory references. Use R@ through R13 
instead, for example. 


Instructions for which any explicit operand can be in I/O space: 


MOV{B,W,L}, PUSHL, CLR{B,W,L}, MNEG{B,W,L}, MCOM{B,W,L}, MOVZ{BW,BL,WL}, 
CVT {BW,BL,WB,WL,LB,LW}, CMP{B,W,L}, TST{B,W,L}, ADD{B,W,L}2, 
ADD{B,W,L}3, ADAWI, INC{B,W,L}, ADWC, SUB{B,W,L}2, SUB{B,W,L}3, 
DEC{B,W,L}, SBWC, BIT{B,W,L}, BIS{B,W,L}2, BIS{B,W,L}3, BIC{B,W,L}2, 
BIC{B,W,L}3, XOR{B,W,L}2, XOR{B,W,L}3, MOVA{B,W,L}, MOVAQ, PUSHA{B,W,L}, 
PUSHAQ, CASE{B,W,L}, MOVPSL, BISPSW, BICPSW, CHM{K,E,S,U} PROBE{R,W}, 
MTPR, MFPR 


Instructions for which all operands except the branch displacement can 
be in I/O space: 


BLB{S,C} 
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Instruction for which some operand can be in I/O space: 


XFC (depending on implementation) 
REMQUE addr (destination) 
REMQHI addr (destination) 
REMQOTI addr (destination) 


Notwithstanding the above rules, it is possible for a specific hardware 
implementation to execute macro code from the I/O space and/or to allow 
the stack or PCB to be in I/O space. This might, for example, be used 
as part of the bootstrap process. If this is done, then it is valid for 


software to transfer to this code. 


BLANK 


() 
aS a notation, 3-4 


{} 


aS a notation, 3-4 


Abort, 6-1, 6-3 
Absolute addressing mode, 3-7 
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INDEX 


synchronization, 3-19 
read, 3-2, 3-18 
write, 3-2, 3-18 
ACCR - Accelerator Maintenance 
Register, 9-15 
ACCS - Accelerator 
Control/Status register, 


Absolute indexed addressing mode, 9-27 


3-14 
Absolute indexed mode, 3-14 
Absolute mode, 3-7 
Interlocked, 
Absolute queues, 4-99 
ACBB - Add Compare and Branch 
Byte, 4-50 
ACBD - Add Compare and Branch 
D floating, 4-50 
ACBF - Add Compare and Branch 
F floating, 4-598 
ACBG - Add Compare and Branch 
G floating, 4-58 
ACBH - Add Compare and Branch 
H floating, 4-50 
ACBL - Add Compare and Branch 
Long, 4-5@ 
ACBW - Add Compare and Branch 
Word, 4-5@ 
Accelerator 
VAX-11/788, 9-15 
Accelerator Control/Status 
Register (ACCS), 9-15 
register (ACCS), 9-27 
Accelerator Maintenance 
Register (ACCR), 9-15 
Access across page boundaries, 
5-13 
Access control, 5-19 
Access control violation fault, 
6-17 
Access mode, 6-5 
memory, 6-5 
Access mode, memory, 5-190 
Executive, 5-16 
Kernel, 5-10 
Supervisor, 5-196 
User, 5-10 
Access type, operand, 3-2 
address, 3-2, 3-18 
branch, 3-2, 3-18 
modify, 3-2, 3-18 


ACCS - Accelerator Control/Status 
Register, 9-15 
ADAWI - Add Aligned Word 


4-19 

ADDB2 - Add Byte 2 Operand, 4-11 

ADDB3 - Add Byte 3 Operand, 4-11 

ADDD2 - Add D_ floating 2 Operand, 
4-122 

ADDD3 - Add D floating 3 Operand, 
4-122 

ADDF2 - Add F floating 2 Operand, 
4-122 

ADDF3 - Add F floating 3 Operand, 
4-122 

ADDG2 - ADD G floating 2 Operand, 
4-122 

ADDG3 - ADD G floating 3 Operand, 
4-122 

ADDH2 - ADD H_floating 2 Operand, 
4-122 

ADDH3 - ADD H floating 3 Operand, 
4-122 — 

ADDL2 - Add Long 2 Operand, 4-ll 

ADDL3 - Add Long 3 Operand, 4-ll 

ADDP4 - Add Packed 4 Operand, 
4-180 

ADDP6 - Add Packed 6 Operand, 
4-189 

Address, 2-1 

Address access type, operand, 


3-2, 3-18 
Address arguments, validating, 
5-25 


Address instructions, 4-38 
Address translation, 5-6 
Addressing modes notation, 3-4 
ADDW2 - Add Word 2 Operand, 4-11 
ADDW3 - Add Word 3 Operand, 4-11 
ADWC - Add With Carry, 4-12 
Alignment 

stack, 6-35 


target 
AOBLEQ - 
Less 


of control, 4-48 

Add One and Branch 

Than or Equal, 4-52 

AOBLSS - Add One and Branch 

Less Than, 4-53 

AP - Argument Pointer Register, 
2-15 

Argument Pointer Register, 

Arithmetic faults, 6-14 

Arithmetic instructions 
decimal string, 4-175 
floating point, 4-115 
integer, 4-7 

Arithmetic traps, 

Array addressing, 

ASHL - Arithmetic 


2-15 


6-14 
3-14 
Shift Long, 


4-13 
ASHP - Arithmetic Shift and Round 
Packed, 4-182 
ASHQ - Arithmetic Shift Quad, 
4-13 
AST - Asynchronous System Trap, 
6-8, 6-33, 6-40 


AST - Aynchronous System Trap, 
6-34 
AST, Asynchronous System Traps, 
7-7 
ASTLVL - Asynchronous System 
Trap Level, 6-8 
ASTLVL - Aynchronous System 
Trap Level, 6-19, 6-39 
ASTLVL - Pending AST Level, 7-5 
Autodecrement addressing mode, 
3-8 
Autodecrement indexed 
addressing mode, 3-14 
Autodecrement indexed mode, 
Autodecrement mode, 3-8 
Autoincrement addressing mode, 
3-6 
Autoincrement deferred 
addressing mode, 3-7 
Autoincrement deferred indexed 
addressing mode, 3-14 
mode, 3-14 
Autoincrement deferred mode, 3-7 
Autoincrement indexed 
addressing mode, 3-14 
Autoincrement indexed mode, 3-14 
Autoincrement mode, 3-6 


3-14 


Base operand specifier, 3-13 


Base register, 2-15 
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BBC - Branch on Bit Clear, 4-56 
BBCC —- Branch on Bit Clear 
and Clear, 4-57 
BBCCI - Branch on Bit Clear 
and Clear Interlocked, 
BBCS - Branch on Bit Clear 
and Set, 4-57 
BBS - Branch on Bit Set, 
BBSC - Branch on Bit Set 
and Clear, 4-57 
BBSS - Branch on Bit Set 
and Set, 4-57 
BBSSI - Branch on Bit Set 
and Set Interlocked, 4-59 
BCC - Branch on Carry Clear, 
4-54 
BCS - Branch on Carry Set, 4-54 
BEQL - Branch on Equal, 4-54 
BEQLU - Branch on Equal Unsigned, 
4-54 
BGEQ - Branch on Greater Than 
or Equal, 4-54 
BGEQU - Branch on Greater Than 
or Equal Unsigned, 4-54 
BGTR - Branch on Greater Than, 
4-54 
BGTRU - Branch on Greater Than 
Unsigned, 4-54 
BICB2 - Bit Clear Byte 2 Operand, 
4-14 
BICB3 - Bit Clear Byte 3 Operand, 
4-14 
BICL2 - Bit Clear 


4-59 


4-56 


Long 2 Operand, 


aus Bit Clear Long 3 Operand, 
ener - Bit Clear PSW, 4-79 
BICW2 - Bit Clear Word 2 Operand, 
age Bit Clear Word 3 Operand, 
sees 2 Bit Set Byte 2 Operand, 
re Bit Set Byte 3 Operand, 
ee Bit Set Long 2 Operand, 
pIst3 Bit Set Long 3 Operand, 


BISPSW - Bit Set PSW, 4-82 

BISW2 - Bit Set Word 2 Operand, 
4-15 

BISW3 - Bit Set Word 3 Operand, 


4-15 
Bit efficiency 
as a goal, 1-1 
BITB - Bit Test Byte, 4-16 
BITL - Bit Test Long, 4-16 
BITW - Bit Test Word, 4-16 
BLBC - Branch on Low Bit Clear, 
4-61 
BLBS - Branch on Low Bit Set, 
4-61 
BLEQ - Branch on Less Than 
or Equal, 4-54 
BLEQU - Branch on Less Than 
or Equal Unsigned, 4-54 
BLSS - Branch on Less Than, 4-54 
BLSSU - Branch on Less Than 
Unsigned, 4-54 
BNEQ -— Branch on Not Equal, 4-54 
BNEQU - Branch on Not Equal 
Unsigned, 4-54 
BPT - Breakpoint Fault, 4-81 
Braces 
as a notation, 3-4 
Branch access type, operand, 
3-2, 3-18 
Branch displacement addressing, 
3-17 
BRB - Branch Byte Displacement, 
4-62 
Breakpoint fault, 6-21 
BRW - Branch Word Displacement, 
4-62 
BSBB - Branch to Subroutine 
Byte Displacement, 4-63 
BSBW - Branch to Subroutine 
Word Displacement, 4-63 
Bugcheck, 4-227 
BUGL, 4-227 
BUGW, 4-227 
BVC - Branch on Overflow Clear, 
4-54 
BVS - Branch on Overflow Set, 
4-54 
Byte, 2-l 
Byte data type, operand, 3-2 
Byte displacement 
addressing mode, 3-8 
Byte displacement deferred 
addressing mode, 3-9 
indexed addressing mode, 
3-14 
indexed mode, 3-14 
Byte displacement deferred mode, 
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3-9 
Byte displacement indexed 
addressing mode, 3-14 
Byte displacement indexed mode, 
3-14 
Byte displacement mode, .3-8 


C - Carry Condition Code, 2-17, 
6-5 

C condition code, 2-17, 6-5 

Cache, 8-2 

Cache Disable register (CADR), 
9-26 

Cache Error register (CAER), 
9-26 

CADR - Cache Disable register, 
9-26 

CAER - Cache Error register, 
9-26 

Call frame, 4-79 

CALLG - Call Procedure With 

General Argument List, 4-72 
CALLS - Call Procedure With 
Stack Argument List, 4-74 

CASEB - Case Byte, 4-64 

CASEL - Case Long, 4-64 

CASEW - Case Word, 4-64 

Change mode instructions, 6-41 

Character, 2-8 
fill, 4-205 
Sign, 4-205 

Character string data type, 2-8 

Character string instructions, 
4-145 

Check protection, 4-222 

CHME -—- Change Mode to Executive, 
6-41 

CHME -- Change Mode to Executive, 
4-226 

CHMK - Change Mode to Kernel, 
6-41 

CHMK -- Change Mode to Kernel, 
4-226 

CHMS - Change Mode to Supervisor, 
6-41 

CHMS -- Change Mode to Supervisor, 
4-226 

CHMU - Change Mode to User, 6-41 

CHMU -- Change Mode to User, 
4-226 

Clock Registers, 9-11 

Clock, interval, 9-13 

CLRB - Clear Byte, 4-17 
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CLRD - Clear D floating, 4-124 
CLRF - Clear F floating, 4-124 


reserved instrucions, 19-8 
reserved instruction fault, 


CLRG - Clear G floating, 4-124 10-57 
CLRH - Clear H floating, 4-124 stack, 18-6 
CLRL - Clear Long, 4-17 synchronization, 198-61 


CLRO - Clear Octa, 4-17 T-bit, 19-58 
CLRO - Clear Quad, 4-17 TRAP fault, 19-57 
CLRW - Clear Word, 4-17 trap instrucions, 106-8 
CMI Error register, 9-24 unimplimented traps, 198-60 
CMIERR - CMI Error register, user environment, 108-2 
9-24 Compatibility mode exception, 
CMP - Compatibility Mode, 6-5 6-21 
CMPB - Compare Byte, 4-18 Condition Codes, 2-17, 6-5 
CMPC3 - Compare Characters Console Receive Control/Status 
3 Operand, 4-148 register (RXCS), 9-8 
CMPC5 —- Compare Characters Console Receive Data Buffer 
5 Operand, 4-148 register (RXDB), 9-8 
CMPD - Compare D floating, 4-125 Console Storage 
CMPF - Compare F floating, 4-125 Receive Status register (CSRS), 
CMPG - Compare G floating, 4-125 9-25 
CMPH - Compare H floating, 4-125 Console Storage Device, 9-25 
CMPL - Compare Long, 4-18 Console Storage Receive 
CMPP3 - Compare Packed Data Buffer register (CSRD), 
3 Operand, 4-184 9-25 
CMPP4 - Compare Packed Console Storage Transmit 
4 Operand, 4-184 Status register (CSTS), 9-25 
CMPV ~- Compare Field, 4-42 Console Storage Transmit Data 
CMPW - Compare Word, 4-18 Buffer register (CSTD), 9-25 
CMPZV - Compare Zero Extended Console terminal registers, 9-8 
Field, 4-42 Console Transmit Control/Status 


Compatibility 
aS a goal, 1-1 
Compatibility (PDP-11) 
longword data format, 2-2 
Compatibility mode, 6-5 
address modes, 16-2 
addresses, 106-54 
BPT fault, 198-57 
EMT fault, 10-57 
entering, 19-53 
exceptions, 10-57 
I/O, 18-61 
illegal instruction fault, 
14-57 
instructions, 108-7 
interrupts, 10-57 
IOT fault, 10-57 
leaving, 198-53 
memory management, 10-54 
processor registers, 10-61 
PSW, 10-6 
register mapping, 198-53 
registers, 10-2 


register (TXCS), 9-9 
Console Transmit Data Buffer 
register (TXDB), 9-9 
Constraints on I/O registers, 

8-5 
Context switching, 7-1 
Context, process, 6-1, 6-3, 
6-5, 6-34, 7-1 to 7-2 
Context, system wide, 6- 
Control instructions, 4- 
Control Store, Micro 
VAX-11/786, 9-17 
Conventions 
general, 1-2 
in notation, 4-6 
CRC - Calculate Cyclic 
Redundancy Check, 4-172 
CSRD - Console Storage Receive 
Data Buffer register, 9-25 
CSRS - Console Storage Receive 
Status register, 9-25 
CSS, Reserved to, 1-3 
CSTD - Console Storage Transmit 


1, 6-34 
48 


Data Buffer register, 9-25 


CSTS - Console Storage 
Transmit Status register, 


9-25 


CUR_MOD - Current Mode, 6-5 


Currency Sign, 4-205 


Current Frame Pointer Register, 


2-15 


Current mode, 6- 


Customers, 
CVTBD - Convert 
D floating, 
CVTBF - Convert 
F floating, 
CVTBG - Convert 
G floating, 
CVTBH - Convert 
H floating, 
CVTBL - Convert 
4-19 
CVTBW - Convert 


4-19 
CVTDB - Convert 
Byte, 4-126 


CVTDF - Convert 
F floating, 
CVTDH - Convert 
H floating, 
CVTDL - Convert 
Long, 4-126 
CVTDW! - Convert 
Word, 4-126 
CVTFB - Convert 
Byte, 4-126 
CVTFD - Convert 
D floating, 
CVTFG - Convert 
G floating, 
CVTFH - Convert 
H floating, 
CVTFL - Convert 
Long, 4-126 
CVTFW - Convert 
Word, 4-126 
CVTGB - Convert 
Byte, 4-126 
CVTGF - Convert 
F floating, 
CVTGH - Convert 
H floating, 
CVTGL - Convert 
Long, 4-126 
CVTGW - Convert 


Reserved to, 


5 


Byte to 
4-126 
Byte to 
4-126 
Byte to 
4-126 
Byte to 
4-126 


I=3 


Byte to Long, 


Byte to Word, 


D floating 


D floating 
4-126 
D floating 
4-126 
D floating 


D floating 
F floating 


F floating 
4-126 
F floating 
4-126 
F_ floating 
4-126 
F floating 


F floating 
G floating 
G_ floating 
4-126 

G floating 
4-126 

G floating 


G floating 


to 


to 


to 


to 


to 


to 


to 


to 


to 


Co 


Co 


to 


to 


to 


to 


to 


Word, 4-126 
CVTHB - Convert 
Byte, 4-126 
CVTHD - Convert 
D floating, 
CVTHF - Convert 
F floating, 
CVTHG - Convert 
G floating, 
CVTHL - Convert 
Long, 4-126 
CVTHW - Convert 
Word, 4-126 
CVTLB - Convert 
4-19 
CVTLD - Convert 
D floating, 
CVTLF - Convert 
F floating, 
CVTLG - Convert 
G floating, 
CVTLH - Convert 
H floating, 
CVTLP - Convert 
4-185 
CVTLW - Convert 
4-19 
CVTPL —- Convert 
4-187 
CVTPS - Convert 
to Leading 
4-189 
CVTPT - Convert 
to Trailing 
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H floating to 


H floating to 
4-126 
H floating to 
4-126 
H floating to 
4-126 
H floating to 


H floating to 
Long to Byte, 


Long to 

4-126 

Long to 

4-126 

Long to 

4-126 

Long to 

4-126 

Long to Packed, 


Long to Word, 
Packed to Long, 


Packed 
Separate Numeric, 


Packed 


Numeric, 4-191 


CVTRDL - Convert Rounded 

D floating to Long, 4-126 
CVTRFL - Convert Rounded 

F floating to Long, 4-126 
CVTRGL - Convert Rounded 

G floating to Long, 4-126 
CVTRHL - Convert Rounded 

H floating to Long, 4-126 


CVTSP'- Convert 


Numeric to Packed, 


CVTTP - Convert 
to Packed, 
CVTWB - Convert 
4-19 

CVTWD - Convert 
D floating, 
CVTWF - Convert 
F floating, 
CVTWG - Convert 


Leading Separate 
4-193 
Trailing Numeric 
4-195 

Word to Byte, 


Word to 
4-126 
Word to 
4-126 
Word to 


G floating, 4-125 
CVTWH - Convert Word to 
H floating, 4-126 
CVTWL - Convert Word to Long, 
4-19 
Cyclic redundancy check, 4-171 


D floating, 2-4 
D floating data type, 
operand, 3-2 
Data sharing, 8-l 
Data synchronization, 8-1 
Data type 
character string, 2-8 
decimal string, 2-13 


floating, 


2-4 to 2-5 


integer, 


2-1 to 2-3 


packed decimal string, 


string, 


2-8, 2-13 


2-13 


variable length bit field, 


Data type, operand, 


3-2 


2-6 
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Displacement mode, 3-9 


DIVB2 - Divide 
4-21 
DIVB3 - Divide 
4-21 
DIVD2 - Divide 
2 Operand, 
DIVD3 - Divide 
3 Operand, 
DIVF2 - Divide 
2 Operand, 
DIVF3 - Divide 
3 Operand, 
DIVG2 - Divide 
2 Operand, 
DIVG3 - Divide 
3 Operand, 
DIVH2 - Divide 
2 Operand, 
DIVH3 - Divide 
3 Operand, 


Byte 2 Operand, 


Byte 3 Operand, 


D floating 
4-130 
D floating 
4-130 
F floating 
4-136 
F floating 
4-130 
G floating 
4-130 
G floating 
4-139 
H floating 
4-13@ 
H floating 
4-130 


byte, 3-2 
D floating, 3-2 
F floating, 3-2 
G floating, 3-2 
H floating, 3-2 
longword, 3-2 
octaword, 3-2 
quadword, 3-2 
word, 3-2 
Data types, 2-1 
DEC, Reserved to, 1-3 
DECB —- Decrement Byte, 4-29 
Decimal overflow, 2-18, 6-5 
Decimal string data type 
packed, 2-13 
Decimal string divide by 
zero trap, 6-15 
Decimal string instructions, 
4-175 
Decimal string overflow trap, 
6-15 
DECL - Decrement Long, 4-29 
DECW - Decrement Word, 4-2@ 
Digits 
Significant, 4-205 
Dispatch 
CHMx, 6-42 
Displacement addressing mode, 
3-9 
Displacement deferred indexed 
addressing mode, 3-14 
mode, 3-14 


WW W 


Divide by zero fault, 6-16 

Divide by zero trap, 6-15 

DIVL2 - Divide Long 2 Operand, 
4-21 

DIVL3 - Divide Long 3 Operand, 
4-21 

DIVP - Divide Packed, 4-197 

DIVW2 - Divide Word 2 Operand, 
4-21 

DIVW3 -—- Divide Word 3 Operand, 
4-21 

DV - Decimal Overflow Enable, 
2-18, 6-5 


Edit instruction, 4-205 

EDITPC - Edit Packed to 
Character String, 4-206 

EDIV - Extended Divide, 4-23 

Efficiency, bit 

as a goal, 1l-l 

EMODD - Extended Multiply and 
Integerize D floating, 4-132 

EMODF - Extended Multiply and 
Integerize F floating, 4-132 

EMODG - Extended Multiply and 
Integerize G floating, 4-132 

EMODH - Extended Multiply and 
Integerize H floating, 4-132 

EMUL - Extended Multiply, 4-24 

Entry mask, 4-70 

EOSADJUST_ INPUT - Adjust Input 
Length, 4-224 


EOSBLANK ZERO - Blank Backwards 
When Zero, 4-229 
EOSCLEAR_SIGNIF - Clear 
Significance, 4-223 
EOSEND - End Edit, 4-225 
EOSEND FLOAT - End Floating Sign, 
4-219 
EOSFILL - Store Fill, 4-215 
EOSFLOAT - Float Sign, 4-217 
EOSINSERT - Insert Character, 
4-213 
EOSLOAD FILL - Load Fill 
Register, 4-222 
EOSLOAD MINUS - Load Sign 
Register If Minus, 4-222 


EOSLOAD PLUS - Load Sign 
Register If Plus, 4-222 
EO$LOAD SIGN - Load Sign 


Register, 4-222 
EOSMOVE - Move Digits, 4-216 
EOSREPLACE SIGN - Replace Sign 
When Zero, 4-221 
EOSSET SIGNIF - Set Significance, 
4-223 
EOSSTORE SIGN - Store Sign, 
4-214 
Errors, processor, 8-4 
ESP - Executive Stack Pointer, 
7-4 
Exception, 6-3 
Exception condition, 6-1 
Exceptions detected during 
operand reference, 6-18 
the operation, 6-14 
Exceptions occurring as the 
consequence of an 
instruction, 6-20 
Executive memory access mode, 
5-19 
Extensibility 
as a goal, 1-1 
Extension, specifier, 
3-9 to 3-19, 3-13 
Extent, 1-2 
EXTV - Extract Field, 4-44 
EXTZV - Extract Zero Extended 
Field, 4-44 


F floating, 2-4 

F floating data type, operand, 
3-2 

Fault, 6-1, 6-3 


memory management, 5-23 
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Faults 

arithmetic, 6-14 
FF - Floating Fault Enable, 6-5 
FFC - Find First Clear, 4-45 
FFS - Find First Set, 4-45 
Field, 2-6 
FIELD - field addressing 

notation, 4-490 

Field instructions, 4-4@ 
Fill, 4-205 
Fill character, 4-295 
Fill register, 4-205 


First part done, 6-5 

Floating, 2-4 to 2-5 

Floating currency symbol, 4-205 

Floating data type, 2-4 

Floating divide by zero fault, 
6-16 

Floating divide by zero trap, 
6-15 

Floating fault, 6-5 

Floating overflow fault, 6-15 

Floating overflow trap, 65-15 

Floating point 


immediate constant, 3-12 
Floating point instructions, 
4-115 
Floating 
Floating 


Sign, 4-265 

underflow, 2-18, 

Floating underflow fault, 6-16 

Floating underflow trap, 6-15 

FP - Current Frame Pointer 

Register, 2-15 

FPD —- First Part Done, 6-5 

Frame Pointer Register, Current, 
2-15 

FU - Floating Underflow Enable, 
2-18, 6-5 


6-5 


G floating, 2-5 
G floating data type, 
operand, 3-2 

General mode addressing, 3-5 
General Registers, 7-4 
Global page table index (gptx), 

5-8 
Goals, 
Gptx, 


Lh 
5-8 


H floating, 2-5 

H floating data type, 
operand, 3-2 

HALT - Halt, 4-82 


Halt, processor, 6-26, 6-28, 
6-34, 6-38, 6-41, 6-43, 8-2, 
9-18 
VAX-11/7808, 6-29 


I/O instructions, A-18 
I/O structure, 2-28, 8-5 
IccS - Interval Clock 
Control/Status register, 
9-13 
ICR - Interval Count Register, 
9-13 
Immediate addressing mode, 3-6 
Immediate constant 
Floating point, 3-12 
integer, 3-ll 
Immediate indexed 
addressing mode, 3-14 
Immediate indexed mode, 3-14 
Immediate mode, 3-6 
INCB - Increment Byte, 4-25 
INCL - Increment Long, 4-25 
INCW - Increment Word, 4-25 
INDEX - Compute Index, 4-83 
Index addressing mode, 3-13 
Index mode, 3-13 
Index register, 2-15 
Indivisible operation 
modify access, 3-19 
Initialize UNIBUS (IORESET), 
9-27 
Initiate exception or interrupt, 
6-37 
INSQHI - Insert Entry into Queue 
at Head, Interlocked, 4-99 
INSOQTI - Insert Entry into Queue 
at Tail, Interlocked, 4-162 
INSQUE - Insert Entry in Queue, 
4-165 
Instruction format, 2-19 
Instruction operand formats, A-l 
INSV - Insert Field, 4-47 
Integer 
immediate constant, 3-11 
Integer data type, 2-1 to 2-3 
Integer divide by zero trap, 
6-15 
Integer instructions, 4-7 
Integer overflow, 2-18, 6-5 
Integer overflow trap, 6-14 
Interrupt, 6-1 to 6-3, 6-8 
Interrupt AST Delivery, 7-8 
Interrupt priority level, 6-5 
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Interrupt Priority Level (IPL), 
6-2, 6-11 

Interrupt process, 6-8 

Interrupt stack, 6-5 

Interrupt stack not valid halt, 
6-26 

Interrupt structure, 2-20 

Interrupt, Process Scheduling, 
7-8 

Interrupts, 8-4 

Interrupts, Process Structure, 
7-8 

Interval clock, 9-13 

Interval Clock Control/Status 

register (ICCS), 9-13 

Interval Count Register (ICR), 
9-13 

IORESET - Initialize UNIBUS, 
9-27 

IPL - Interrupt Priority Level, 
6-2, 6-5, 6-18 to 6-11 

IS - Interrupt Stack in uSe, 
6-5, 6-35 

IV - Integer Overflow Enable, 
2-18, 6-5 


JMP - Jump, 4-65 
JSB - Jump To Subroutine, 4-66 


Kernel memory access mode, 5-19 

Kernel stack not valid abort, 
6-26 

KSP - Kernel Stack Pointer, 7-4 


LDPCTX - Load Process Context, 
7-9 
LDPCTX -- Load Process Context, 
4-226 
Leading separate sign, 4-175, 
4-189, 4-193 
Leading zero, 4-223 
Literal addressing mode, 3-11 
Literal mode, 3-1l 
LOCC - Locate Character, 4-152 
Logical instructions, 4-7 
Longword, 2-2 
PDP-11l compatibility, 2-2 
Longword data type, operand, 3-2 
Longword displacement 
addressing mode, 3-8 
Longword displacement deferred 
addressing mode, 3-9 
indexed addressing mode, 


3-14 
indexed mode, 3-14 
mode, 3-9 
Longword displacement indexed 
addressing mode, 3-14 
mode, 3-14 
Longword displacement mode, 3-8 


M - Modify bit, 5-6 
Machine Check Error Summary 
register (MCESR), 9-26 
Machine check exception, 6-26 
MAPEN - Map Enable Register, 5-5 
MATCHC -—- Match Characters, 4-154 
MBRK - Micro Program Breakpoint 
Address register, 9-18 
MBZ, 1-2 
MCESR - Machine Check Error 
Summary register, 9-24 
MCOMB - Move Complemented Byte, 
4-26 
MCOML - Move Complemented Long, 
4-26 
MCOMW - Move Complemented Word, 
4-26 
Memory access mode, 5-19, 6-5 
Executive, 5-190 
Kernel, 5-19 
Supervisor, 5-19 
User, 5-10 
Memory management control, 5-5 
Memory management exceptions, 
6-17 
Memory management faults, 5-23 
Memory Mapping Enable (MAPEN), 
5-5 
MFPR - Move From 
Processor Register, 9-5 
MFPR -- Move From Processor 
Register, 4-226 
Micro Control Store 
VAX-11/786, 9-17 
Micro Program Breakpoint Address 
register (MBRK), 9-18 


MINU - minimum unsigned notation, 


4-6 
Miscellaneous instructions, 4-78 
MME - Memory Mapping Enable, 5-5 
MNEGB - Move Negated Byte, 4-27 
MNEGD - Move Negated D floating, 
4-134 
MNEGF - Move Negated F floating, 
4-134 
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MNEGG - Move Negated G floating, 
4-134 
MNEGH - Move Negated H floating, 
4-134 
MNEGL - Move Negated Long, 4-27 
MNEGW - Move Negated Word, 4-27 
Mode, 5-18, 6-5 
compatibility, 6-5 
Mode changing instructions, 6-41 
Mode, memory access, 5-108, 6-5 
Modify access type, operand, 
3-2, 3-18 
synchronization, 3-19 
Modify bit, 5-6 
MOVAB - Move Address Byte, 4-38 
MOVAD - Move Address D floating, 
4-38 
MOVAF - Move Address F floating, 
4-38 
MOVAG - Move Address G floating, 
4-38 
MOVAH - Move Address H_ floating, 
4-38 
MOVAL - Move Address Long, 4-38 
MOVAO - Move Address Octa, 4-38 
MOVAQ - Move Address Quad, 4-38 
MOVAW - Move Address Word, 4-38 
MOVB - Move Byte, 4-28 
MOVC3 - Move Character 3 Operand, 
4-156 
MOVC5 - Move Character 5 Operand, 
4-156 
MOVD - Move D floating, 4-135 
MOVF - Move F floating, 4-135 
MOVG - Move G floating, 4-135 
MOVH - Move H_ floating, 4-135 
MOVL - Move Long, 4-28 
MOVO - Move Octa, 4-28 
MOVP - Move Packed, 4-199 
MOVPSL - Move PSL, 4-85 
MOVQ - Move Quad, 4-28 
MOVTC - Move Translated 
Characters, 4-160 
MOVTUC - Move Translated 
Until Character, 4-163 
MOVW - Move Word, 4-28 
MOVZBL - Move Zero-Extended 
Byte to Long, 4-29 
MOVZBW - Move Zero-Extended 
Byte to Word, 4-29 
MOVZWL - Move Zero-Extended 
Word to Long, 4-29 
MTPR - Move To 
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Processor Register, 9-3 R{n], 2-15 
MTPR -- Move To Processor register, 2-15 
Register, 4-226 REM - remainder, 4-6 
MULB2 - Multiply Byte 2 Operand, Rn, 2-15 
4-30 SEXT - Sign extend, 3-4, 4-6 
MULB3 - Multiply Byte 3 Operand, ZEXT - zero extend, 3-4, 4-6 
4-30 Numbering, 1-2 


MULD2 - Multiply D_ floating 

2 Operand, 4-135 OA - operand address notation, 
MULD3 - Multiply D floating 3-4 

3 Operand, 4-136 Octaword, 2-3 
MULF2 - Multiply F_ floating Octaword data type, operand, 3-2 

2 Operand, 4-136 Opcode asSignments, A-12 
MULF3 - Multiply F floating Opcode formats, 3-1 

3 Operand, 4-136 Opcode reserved to customers 
MULG2 - Multiply G floating Fault, 6-20 

2 Operand, 4-136 Opcode reserved to DIGITAL Fault, 
MULG3 - Multiply G floating 6-20 

3 Operand, 4-136 Operand format summary, A-l 
MULH2 - Multiply H_ floating Operand specifier, 3-2 

2 Operand, 4-136 Operand specifier access type, 


MULH3 - Multiply H_floating 3=2 
3 Operand, 4-136 Operand specifier conventions, 
MULL2 - Multiply Long 2 Operand, 3-18 
4-32 Operand specifier data type, 3-2 


MULL3 - Multiply Long 3 Operand, Operand specifier notation, A-9 
4-30 Operand specifier, base, 3-13 
MULP - Multiply Packed, 4-201 Operand, primary, 3-13 


MULW2 - Multiply Word 2 Operand, Orthogonality 
4-30 aS a goal, 1-1 
MULW3 - Multiply Word 3 Operand, Overflow, 6-4 to 6-5, 
4-30 6-14 to 6-16, 6-27 
Stack, 6-26 
N - Negative Condition Code, 
2-17, 6-5 P§ Base Register, 7-4 
N condition code, 2-17, 6-5 PG Base Register (P@BR), 5-17 
Next Interval Count P@ Length Register (P@LR), 5-17 
Register (NICR), 9-13 P®@ Limit Register, 7-4 
Nibble, 2-13 P@ Page Table (POPT), 5-17 
NICR -—- Next Interval Count P@ Region, 5-17 
Register, 9-13 P@ region, 5-4 


NOP - No Operation, 4-86 
as a diagnostic scope point, 
9-18 
Notation 
(), 3-4 
{}, 3-4 
addressing modes, 3-4 


FIELD - field addressing, 4-490 


MINU —- minimum unsigned, 4-6 
OA - operand address, 3-4 
operand specifier, 4-3, A-9 
operation description, 4-4 


P#BR - P®@ Base Register, 5-17, 
7-4 

POLR - P®@ Length Register, 5-17 

PHLR - P@ Limit Register, 7-4 

POPT - PB Page Table, 5-17 

Pl Base Register, 7-5 

Pl Base Register (P1BR), 5-20 

Pl Length Register (P1LR), 5-20 

Pl Limit Register, 7-5 

Pl Page Table (PI1PT), 5-20 

Pl Region, 5-20 

Pl region, 5-4 


PIBR — Pl Base Register, 5-290, 
7-5 
PILR - Pl Length Register, 5-290 
PILR - Pl Limit Register, 7-5 
PIPT - Pl Page Table, 5-280 
Packed decimal 
instructions, 4-175 
Packed decimal string, 2-13 
Page, 5-2 
Page frame number field, 5-6 
Page Table Entry (PTE), 5-6, 5-8 
Parentheses 
aS a notation, 3-4 
Part done, 6-5 
PC - Program Counter Register, 
2-15 
in process context, 7-4 
PCB - Process Control Block, 7-2 
PCBB - Process Control Block 
Base, 7-2 
Per-process Space, 5-4 
Performance monitor enable, 7-5 
PFN - Page Frame Number field, 
5-6 
PME -—- Performance Monitor Enable, 
7=5 
POLYD - Polynomial Evaluation 
D floating, 4-138 
POLYF - Polynomial Evaluation 
F floating, 4-138 
POLYG - Polynomial Evaluation 
G floating, 4-138 
POLYH - Polynomial Evaluation 
H floating, 4-138 
POPR - Pop Registers, 4-87 
Power fail, 8-2 
Previous mode, 6-5 
Primary operand, 3-13 
Priority level, 6-5 
Probe accessibility, 5-26, 5-28 
PROBER - Probe Read 
Accessibility, 4-226 
accessibility, 5-26 
PROBEW - Probe Write 
Accessibility, 4-226 
accessibility, 5-26 
Procedure call instructions, 
4-70 
Procedure calling interface, 
4-79 
Process context, 7-l 
Process control block, 7-2 
Process scheduling, 7-1 


Process Space, 
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5-4, 5- 
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Process, definition, 7-l 
Processor Errors, 8-4 
Processor Internal Register 


space 
Processor 
Processor 
Processor 
6-5 
Processor 
Processor 


Protectio 
check, 


v 9-1 


Registers, 9-6 
Status Longword (PSL), 


Status Word, 


type, 9-7 
Program counter 

in process context, 7-4 
Program Counter Register, 2-15 
Program status longword 

in process context, 7-4 
PROT -—- Protection field, 5-6 


nN, 5- 
4-222 


10 


Protection Code, 5-19 
Protection field, 5-6 
PRV MOD - Previous Mode, 6-5 

PSL - Processor Status Longword, 


6-5 


2-17 


PSL - Program Status Longword 
in process context, 7-4 
PSW - Processor Status Word, 


2-17, 6-3, 6-5, 6-19 
PTE - Page Table Entry, 5-6, 5-8 
PUSHAB - Push Address Byte, 4-39 
PUSHAD - Push Address D floating, 
4-39 
PUSHAF - Push Address F floating, 
4-39 
PUSHAG - Push Address G floating, 
4-39 
PUSHAH - Push Address H_ floating, 
4-39 
PUSHAL - Push Address Long, 4-39 
PUSHAQ - Push Address Quad, 4-39 
PUSHAW - Push Address Word, 4-39 
PUSHL - Push Long, 4-31 


PUSHR - Push Registers, 4-88 


Quadword, 


2-3 


Quadword data type, operand, 3-2 


Queue instructions, 


Range 


aS a goal, 
Range of values, 1-2 
Read access type, operand, 3-2, 


3-18 


L=2 


4-99 


Register 
fill, 4-205 
Sign, 4-205 
Register addressing mode, 
3-5 to 3-6 
Register deferred 
addressing mode, 3-5 
Register deferred indexed 
addressing mode, 3-14 
Register deferred indexed mode, 
3-14 
Register deferred mode, 3-5 
Register mode, 3-5 to 3-6 
Register usage, 2-15 
Registers 
VAX-11 Series, 9-6 
VAX-11/75@ Specific, 9-24 
VAX-11/78@ Specific, 9-15 
REI - Return from Exception 
or Interrupt, 6-39 
-- Return from Exception 
or Interrupt, 4-226 
REM - remainder notation, 4-6 
REMQHI - Remove Entry from Queue 
at Head, Interlocked, 4-197 
REMQTI - Remove Entry from Queue 
at Tail, Interlocked, 4-119 
REMQUE - Remove Entry from Queue, 
4-113 
RESERVED, 1-3 
Oop addressing mode fault, 
-18 
Reserved operand exception, 6-18 
Restartability, 8-3 
RET - Return from Procedure, 
4-76 
Revision level, 9-7 
ROTL - Rotate Long, 4-32 
RSB - Return From Subroutine, 
4-67 
RXCS - Console Receive 
Control/Status register, 9-8 
RXDB - Console Receive 
Data Buffer register, 9-8 


REI 


Saved PC, 6-3, 6-5, 6-14, 6-18, 
6-22, 6-27 to 6-28 

Saved PSL, 6-3, 6-5, 6-14, 
6-21 to 6-23, 6-25, 
6-27 to 6-28 

Saved TP, 6-22 to 5-23, 6-25, 
6-27 to 6-28 

SBI Error register (SBIER), 9-21 
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SBI Fault/Status register (SBIFS), 
9-18 
SBI Maintenance register (SBIMT), 
9-20 
SBI Quad Clear (SBIQC), 
SBI Silo Comparator 
register (SBISC), 9-19 
SBI Silo Data Register (SBIS), 
9-19 
SBI Timeout Address 
register (SBITA), 9-22 
SBIER - SBI Error register, 9-21 
SBIFS - SBI Fault/Status register, 
9-18 
SBIMT - SBI Maintenance register, 
9-290 
SBIOQC - SBI Quad Clear, 9-23 
SBIS - SBI Silo Data Register, 
9-19 
SBISC - SBI Silo Comparator 
register, 9-19 
SBITA - SBI Timeout Address 
register, 9-22 
SBR - System Base Register, 5-13 
SBWC - Subtract With Carry, 4-33 
SCANC -—- Scan Characters, 4-165 
SCBB - System Control Block Base, 
6-29 
Scheduling, process, 7-1 
Self-relative queues, 4-95 
Separate sign, leading, 4-175, 
4-189, 4-193 
Separation of procedure and data, 
2-20 
Serial number, 9-7 
Serialization of notification 
of multiple events, 6-27 
SEXT - Sign extend notation, 
3-4, 4-6 
Sharing, 8-1 
SID - System Identification, 9-7 
Sign, 4-205 
currency, 4-265 
Sign character, 4-205 
Sign register, 4-265 
Significance, 4-205 
Significance indicator, 4-265, 
4-223 
Significant digits, 4-205 
SIRR - Software Interrupt 
Request Register, 6-2, 
6-18 to 6-11 
SISR - Software Interrupt 


9-23 


6-8, 
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Summary Register, 6-19 SUBG3 - Subtract G floating 
SKPC - Skip Character, 4-167 3 Operand, 4-143 
SLR - System Length Register, SUBH2 - Subtract H floating 
5-13 2 Operand, 4-143 
SOBGEQ - Subtract One and Branch SUBH3 - Subtract H floating 
Greater Than or Equal, 4-68 3 Operand, 4-143 
SOBGTR - Subtract One and Branch SUBL2 - Subtract Long 2 Operand, 
Greater Than, 4-69 4-34 
Software Interrupt SUBL3 - Subtract Long 3 Operand, 
Request Register (SIRR), 4-34 
6-10 SUBP4 - Subtract Packed 
Summary Register (SISR), 4 Operand, 4-293 
6-10 SUBP6 - Subtract Packed 
Software interrupt, 6-19 6 Operand, 4-293 
SP - Stack Pointer Register, Subscript range trap, 6-16 
2-15 SUBW2 - Subtract Word 2 Operand, 
SPANC - Span Characters, 4-169 4-34 
Specifier extension, SUBW3 - Subtract Word 3 Operand, 
3-9 to 3-16, 3-13 4-34 
SPT - System Page Table, 5-13 Summary, 1-1 
SSP - Supervisor Stack Pointer, Supervisor memory access mode, 
7-4 5-16 
Stack alignment, 6-35 SVPCTX - Save Process Context, 
Stack frame, 4-79 7-11 
Stack pointer SVPCTX -- Save Process Context, 
in process context, 7-4 4-226 
Stack pointer images, 9-2 Switching, context, 7-l 
Stack Pointer Register, 2-15 Synchronization, 8-1 
Stack residency, 6-34 modify access, 3-19 
Stack, switch, 6-34, 6-37, 6-39 System BaSe Register (SBR), 5-13 
String data type System Control Block Base (SCBB), 
Character, 2-8 6-29 
packed decimal, 2-13 System Identification 
String descriptor register (SID), 9-7 
as operand, 4-146, 4-175 System Length Register (SLR), 
String instructions 5-13 
character, 4-146 System Page Table (SPT), 5-13 
cyclic redundancy check, 4-171 System Region, 5-13 
decimal, 4-175 System Space, 5-4, 5-13 
SUBB2 - Subtract Byte 2 Operand, 
4-34 T - Trace Enable, 6-5 
SUBB3 - Subtract Byte 3 Operand, T - Trace Trap Enable, 2-18 
4-34 TB Data register (TBDATA), 9-28 
SUBD2 - Subtract D_ floating TB Group Disable 
2 Operand, 4-143 register (TBDR), 9-26 
SUBD3 - Subtract D floating TBCHK - Translation Buffer 
3 Operand, 4-143 Check register, 5-23 
SUBF2 - Subtract F floating TBDATA - TB Data Register, 9-28 
2 Operand, 4-143 TBDR - TB Group 
SUBF3 - Subtract F floating Disable register, 9-26 
3 Operand, 4-143 TBIA - Translation Buffer 
SUBG2 - Subtract G floating Invalidate All Register, 


2 Operand, 4-143 5-23 


TBIS - Translation Buffer 
Invalidate Single Register, 
5-22 
Terminology 
general, 1-2 

Time-of-Year Register (TODR), 
9-11 

TODR - Time-of-Year Register, 
9-11 

TP - Trace Pending, 6-5 

Trace, 6-5, 6-22 

Trace pending, 6-5 

Trace trap, 2-18 

Trailing numeric 

String instructions, 4-175 
String instructions, 4-19l, 
4-195 

Translation buffer, 5-22 

Translation Buffer Check 
register (TBCHK), 5-23 

Translation Buffer Invalidate 
All Register (TBIA), 5-23 


Single Register (TBIS), 5-22 


Translation not valid fault, 
6-17 
Translation, address, 5-6 
Trap, 6-1, 6-3 
Traps 
arithmetic, 6-14 
TSTB - Test Byte, 4-35 
TSTD - Test D floating, 4-145 
TSTF - Test F floating, 4-145 
TSTG - Test G floating, 4-145 
TSTH - Test H floating, 4-145 
TSTL - Test Long, 4-35 
TSTW - Test Word, 4-35 
TXCS - Console Transmit 


Control/Status register, 9-9 


TXDB - Console Transmit 
Data Buffer register, 9-9 
Type, processor, 9-7 


UNDEFINED, 1-2 

UNIBUS, 6-2, 6-9, 8-1 
Unmapped system, 5-5 
UNPREDICTABLE, 1-2 

Unsigned integer, 2-1 to 2-2 
User memory access mode, 5-19 
USP - User Stack Pointer, 7-4 


V - Overflow Condition Code, 
2-17, 6-5 
V - Valid bit, 5-6 
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V condition code, 2-17, 6-5 

Valid bit, 5-6 

Validating address arguments, 
5-25 

Variable length bit field 

instructions, 4-40 

bytes referenced, 2-7 
data type, 2-6 

VAX-11/78@8 Accelerator, 9-15 

VAX-11/788 Micro Control Store, 
9-17 

Vector, 6-2, 6-28 to 6-21, 
6-26 to 6-27, 6-29, 6-31, 
6-34 to 6-35, 6-37, 6-42 
interrupt, 6-8 

Virtual address, 2-1 

Virtual Address Space, 5-2 

Virtual Page Number, 5-4 

VPN - Virtual Page Number, 5-4 


WCSA - Writable Control Store 
Address register, 9-17 
WCSD - Writable Control Store 
Data register, 9-17 

Word, 2-2 
Word data type, operand, 3-2 
Word displacement 
addressing mode, 3-8 
Word displacement deferred 
addressing mode, 3-9 
indexed addressing mode, 
3-14 
indexed mode, 3-14 
Word displacement deferred mode, 
3-9 
Word displacement indexed 
addressing mode, 3-14 
Word displacement indexed mode, 
3-14 
Word displacement mode, 3-8 
Writable Control Store Address 
register (WCSA), 9-17 
Writable Control Store Data 
register (WCSD), 9-17 
Write access type, operand, 
3-2, 3-18 


XFC - Extended Function Call, 
4-89 
XORB2 - Exclusive OR Byte 
2 Operand, 4-36 
XORB3 - Exclusive OR Byte 
3 Operand, 4-36 


XORL2 - Exclusive OR Long 
2 Operand, 4-36 

XORL3 - Exclusive OR Long 
3 Operand, 4-36 

XORW2 - Exclusive OR Word 
2 Operand, 4-36 

XORW3 - Exclusive OR Word 
3 Operand, 4-36 


Z —- Zero Condition Code, 2-17, 
6-5 

Z condition code, 2-17, 6-5 

Zero 
leading, 4-223 

ZEXT - zero extend notation, 
3-4, 4-6 
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